Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0744
HistoryApr 20, 2010 - 12:00 a.m.

CVE-2010-0744

2010-04-2000:00:00
ubuntu.com
ubuntu.com
7

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.2%

aMSN (aka Alvaro’s Messenger) 0.98.3 and earlier, when SSL is used, does
not verify that the server hostname matches a domain name in the subject’s
Common Name (CN) field or a Subject Alternative Name field of the X.509
certificate, which allows man-in-the-middle attackers to spoof an MSN
server via an arbitrary certificate.

Bugs

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

71.2%