Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
securityvulnsBUGTRAQSECURITYVULNS:VULN:8200
HistoryOct 01, 2007 - 12:00 a.m.

Ruby Net::HTTPS library certificates validation cryptographic vulnerability

2007-10-0100:00:00
BUGTRAQ
vulners.com
8
JSON

Certificate's CN field is not validated against DNS name, making it's possible to use valid certificate with wrong CN.

CPENameOperatorVersion
rubyeq1.8

Related

nessus 25
openvas 38
osv 3
debian 3
prion 2
ubuntucve 2
cve 2
redhat 2
ubuntu 1
oraclelinux 2
centos 1
seebug 1
fedora 14
altlinux 1
rubygems 1
nessus
nessus
SuSE 10 Security Update : ruby (ZYPP Patch Number 4702)
2007-12-13 00:00:00
Debian DSA-1410-1 : ruby1.8 - programming error
2007-11-26 00:00:00
openSUSE 10 Security Update : ruby (ruby-4703)
2007-11-26 00:00:00
openvas
openvas
Debian Security Advisory DSA 1411-1 (libopenssl-ruby)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-596-1)
2009-03-23 00:00:00
Debian Security Advisory DSA 1410-1 (ruby1.8)
2008-01-17 00:00:00
osv
osv
libopenssl-ruby - possible man-in-the-middle attacks
2007-11-24 00:00:00
ruby1.8 - possible man-in-the-middle attacks
2007-11-24 00:00:00
ruby1.9 - possible man-in-the-middle attacks
2007-11-24 00:00:00
debian
debian
[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation
2007-11-25 08:10:14
[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation
2007-11-25 08:09:18
[SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation
2007-11-25 08:08:23
prion
prion
Cross site request forgery (csrf)
2007-11-14 01:46:00
Cross site request forgery (csrf)
2007-10-01 05:17:00
ubuntucve
ubuntucve
CVE-2007-5770
2007-11-14 00:00:00
CVE-2007-5162
2007-10-01 00:00:00
cve
cve
CVE-2007-5770
2007-11-14 01:46:00
CVE-2007-5162
2007-10-01 05:17:00
redhat
redhat
(RHSA-2007:0965) Moderate: ruby security update
2007-11-13 00:00:00
(RHSA-2007:0961) Moderate: ruby security update
2007-11-13 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2008-03-26 00:00:00
oraclelinux
oraclelinux
Moderate: ruby security update
2007-11-13 00:00:00
Moderate: ruby security update
2007-11-23 00:00:00
centos
centos
irb, ruby security update
2007-11-13 13:51:34
seebug
seebug
Ruby多个库SSL多个不安全证书验证漏洞
2007-11-17 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: ruby-1.8.5.114-1.fc6
2007-11-05 14:48:06
[SECURITY] Fedora 7 Update: ruby-1.8.6.111-1.fc7
2007-10-29 19:04:39
[SECURITY] Fedora 7 Update: ruby-1.8.6.110-1.fc7
2007-10-08 14:56:51
altlinux
altlinux
Security fix for the ALT Linux 5 package ruby version 1.8.6-alt3
2008-01-11 00:00:00
rubygems
rubygems
Ruby Net::HTTPS library does not validate server certificate CN
2007-10-07 20:00:00
JSON
Related for SECURITYVULNS:VULN:8200
nessus25openvas38osv3debian3prion2ubuntucve2cve2redhat2ubuntu1oraclelinux2centos1seebug1fedora14altlinux1rubygems1