CVE-2010-1155

2010-04-1400:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

76.0%

JSON

Irssi before 0.8.15, when SSL is used, does not verify that the server
hostname matches a domain name in the subject’s Common Name (CN) field or a
Subject Alternative Name field of the X.509 certificate, which allows
man-in-the-middle attackers to spoof IRC servers via an arbitrary
certificate.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchirssi< 0.8.12-3ubuntu3.2UNKNOWN
ubuntu8.10noarchirssi< 0.8.12-4ubuntu2.2UNKNOWN
ubuntu9.04noarchirssi< 0.8.12-6ubuntu1.2UNKNOWN
ubuntu9.10noarchirssi< 0.8.14-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	irssi	< 0.8.12-3ubuntu3.2	UNKNOWN
ubuntu	8.10	noarch	irssi	< 0.8.12-4ubuntu2.2	UNKNOWN
ubuntu	9.04	noarch	irssi	< 0.8.12-6ubuntu1.2	UNKNOWN
ubuntu	9.10	noarch	irssi	< 0.8.14-1ubuntu1.1	UNKNOWN