Lucene search
MitreCVELIST:CVE-2009-3942HistoryNov 16, 2009 - 7:00 p.m.
CVE-2009-3942
2009-11-1619:00:00
mitre
www.cve.org
4
Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a ‘\0’ character in a domain name in the (1) subject’s Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Related
cve
cve
ubuntucve
ubuntucve
nvd
nvd
debiancve
debiancve
prion
prion
Design/Logic Flaw
2009-11-16 19:30:00
Code injection
2009-07-30 19:30:00
Design/Logic Flaw
2009-09-29 23:30:00
nessus
nessus
openSUSE Security Update : msmtp (msmtp-1813)
2010-01-20 00:00:00
openSUSE Security Update : msmtp (msmtp-1813)
2010-01-20 00:00:00
openSUSE Security Update : msmtp (msmtp-1813)
2010-01-20 00:00:00
gentoo
gentoo
msmtp: X.509 NULL spoofing vulnerability
2012-06-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201206-34 (msmtp)
2012-08-10 00:00:00
Gentoo Security Advisory GLSA 201206-34 (msmtp)
2012-08-10 00:00:00
SLES10: Security update for OpenLDAP2
2009-10-13 00:00:00
cvelist
cvelist
mozilla
mozilla
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
Man-in-the-Middle (MitM)
2019-01-15 08:51:35
seebug
seebug
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
exploitdb
exploitdb
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-42
2009-08-07 00:00:00
cURL / libcurl SSL certificate spoofing
2009-08-17 00:00:00
[ MDVSA-2009:203 ] curl
2009-08-17 00:00:00
debian
debian
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:30:08
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
talos
talos
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability
2017-04-28 00:00:00
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2010-03-29 15:54:57
f5
f5
SOL14909 - OpenSSL vulnerability CVE-2013-4248
2014-01-15 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00