cURL Certificate Validation IDN Man-in-the-Middle

The vulnerability of the cURL command-line utility is related to errors in the certificate validation process when comparing substitute characters in TLS certificates for IDN names. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...