EUVD-2014-6923

Malware in sbrugna...

Information disclosure

The Street Walker aka kt.road.StreetWalker application 0.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7044

The Street Walker aka kt.road.StreetWalker application 0.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7044

The CVE-2014-7044 entry concerns the Android app Street Walker (0.0.1) which fails to verify SSL server X.509 certificates, enabling man-in-the-middle spoofing and data exposure. Multiple connected records (NVD, CVELIST, PRION) describe the same vulnerability: reliance on crafted certificates to ...