CVE-2011-5236

Moneris eSelectPlus 2.03 PHP API is affected by a hostname verification flaw in SSL/TLS: it does not check that the server certificate CN/subjectAltName matches the server hostname, enabling potential man-in-the-middle spoofing with an arbitrary valid certificate. This is documented in CVE-2011-5...