Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3604HistoryOct 25, 2014 - 12:55 a.m.
CVE-2014-3604
2014-10-2500:55:00
Debian Security Bug Tracker
security-tracker.debian.org
9
0.001 Low
EPSS
Percentile
42.3%
Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject’s Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | not-yet-commons-ssl | < 0.3.15-2 | not-yet-commons-ssl_0.3.15-2_all.deb |
Related
prion
prion
Design/Logic Flaw
2014-10-25 00:55:00
gitlab
gitlab
Cryptographic Issues
2014-10-24 00:00:00
nessus
nessus
Fedora 21 : not-yet-commons-ssl-0.3.15-2.fc21 (2014-10691)
2014-09-23 00:00:00
Fedora 19 : not-yet-commons-ssl-0.3.15-2.fc19 (2014-10746)
2014-09-26 00:00:00
Fedora 20 : not-yet-commons-ssl-0.3.15-2.fc20 (2014-10729)
2014-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: not-yet-commons-ssl-0.3.15-2.fc20
2014-09-25 10:32:42
[SECURITY] Fedora 21 Update: not-yet-commons-ssl-0.3.15-2.fc21
2014-09-23 05:10:13
[SECURITY] Fedora 19 Update: not-yet-commons-ssl-0.3.15-2.fc19
2014-09-25 10:37:48
openvas
openvas
Fedora Update for not-yet-commons-ssl FEDORA-2014-10746
2014-10-01 00:00:00
Fedora Update for not-yet-commons-ssl FEDORA-2014-10729
2014-10-01 00:00:00
Mageia: Security Advisory (MGASA-2014-0551)
2022-01-28 00:00:00
github
github
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
2022-05-14 03:59:54
securityvulns
securityvulns
Not Yet Commons SSL certificate spoofing
2015-04-19 00:00:00
[ MDVSA-2015:141 ] not-yet-commons-ssl
2015-04-19 00:00:00
cvelist
cvelist
CVE-2014-3604
2014-10-25 00:00:00
ubuntucve
ubuntucve
CVE-2014-3604
2014-10-25 00:00:00
cve
cve
CVE-2014-3604
2014-10-25 00:55:03
nvd
nvd
CVE-2014-3604
2014-10-25 00:55:03
mageia
mageia
Updated not-yet-commons-ssl packages fix CVE-2014-3604
2014-12-26 20:04:58
osv
osv
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
2022-05-14 03:59:54
redhat
redhat
(RHSA-2015:1888) Important: Red Hat JBoss SOA Platform 5.3.1 security update
2015-10-12 15:22:52
