CVE-2010-4334

The IO::Socket::SSL module 1.35 for Perl, when verifymode is not VERIFYNONE, fails open to VERIFYNONE instead of throwing an error when a cafile/capath cannot be verified, which allows remote attackers to bypass intended certificate restrictions...

CVE-2010-4334

The IO::Socket::SSL module 1.35 for Perl, when verifymode is not VERIFYNONE, fails open to VERIFYNONE instead of throwing an error when a cafile/capath cannot be verified, which allows remote attackers to bypass intended certificate restrictions...

CVE-2010-4334

CVE-2010-4334 affects the Perl IO::Socket::SSL module (v1.35). When verify_mode is not VERIFY_NONE, a ca_file/ca_path that cannot be verified is allowed to open as VERIFY_NONE instead of failing, potentially bypassing certificate restrictions. Impact described in multiple sources (NVD, OSV, vendo...