CVE-2009-2474

CVE-2009-2474 affects neon prior to 0.28.6 when using OpenSSL or GnuTLS. The root cause is improper handling of a '\0' character in the domain name in the X.509 certificate CN field, enabling MITM spoofing of SSL servers via a certificate issued by a legitimate CA. Impact per the entry is partial...