CVE-2013-0289

Isync 0.4 before 1.0.6 fails to verify the server hostname against the CN/SubjectAltName in the X.509 certificate, enabling MITM spoofing with any valid cert. Affected software: isync prior to 1.0.6. Impact per sources: potential disclosure of passwords and other sensitive data. Mitigation: upgra...