Lucene search
MitreCVELIST:CVE-2009-3475HistoryOct 03, 2022 - 4:23 p.m.
CVE-2009-3475
2022-10-0316:23:56
mitre
www.cve.org
internet2 shibboleth service provider
cve-2009-3475
pkix trust validation
ssl servers
man-in-the-middle
certificate authority
Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a ‘\0’ character in the subject or subjectAltName fields of a certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Related
nvd
nvd
ubuntucve
ubuntucve
cve
cve
debiancve
debiancve
prion
prion
Design/Logic Flaw
2009-09-29 23:30:00
Code injection
2009-07-30 19:30:00
Design/Logic Flaw
2013-08-18 02:52:00
openvas
openvas
Shibboleth Service Provider NULL Character Spoofing Vulnerability (Windows)
2009-10-15 00:00:00
Shibboleth Service Provider NULL Character Spoofing Vulnerability - Windows
2009-10-15 00:00:00
SLES11: Security update for mutt
2009-10-11 00:00:00
nessus
nessus
SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 6598)
2010-10-11 00:00:00
SuSE9 Security Update : mutt (YOU Patch Number 12505)
2009-09-24 00:00:00
SuSE 10 Security Update : OpenLDAP2 (ZYPP Patch Number 6485)
2009-09-24 00:00:00
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
Man-in-the-Middle (MitM)
2019-01-15 08:51:35
seebug
seebug
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
mozilla
mozilla
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
cvelist
cvelist
exploitdb
exploitdb
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-42
2009-08-07 00:00:00
fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)
2009-08-08 00:00:00
cURL / libcurl SSL certificate spoofing
2009-08-17 00:00:00
f5
f5
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
SOL14909 - OpenSSL vulnerability CVE-2013-4248
2014-01-15 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
debian
debian
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:30:08
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2010-03-29 15:54:57
talos
talos
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability
2017-04-28 00:00:00