Lucene search
+L

4 matches found

NVD
NVD
•added 2009/08/31 8:30 p.m.•22 views

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

4.3CVSS6.5AI score0.00996EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2009/08/31 8:30 p.m.•28 views

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

4.3CVSS5.9AI score0.00996EPSS
SaveExploits0References1
Prion
Prion
•added 2009/08/31 8:30 p.m.•33 views

Authentication flaw

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

4.3CVSS7AI score0.00996EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/31 12:00 a.m.•6 views

CVE-2009-3024: Undefined Security Weakness

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

4.3CVSS5.9AI score0.00996EPSS
SaveExploits0References2
Rows per page
Query Builder