CVE-2007-6746

2007-12-3100:00:00

ubuntu.com

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.002

Percentile

58.6%

JSON

telepathy-idle before 0.1.15 does not verify (1) that the issuer is a
trusted CA, (2) that the server hostname matches a domain name in the
subject’s Common Name (CN), or (3) the expiration date of the X.509
certificate, which allows man-in-the-middle attackers to spoof SSL servers
via an arbitrary valid certificate.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchtelepathy-idle< 0.1.11-2ubuntu0.1UNKNOWN
ubuntu12.10noarchtelepathy-idle< 0.1.12-1ubuntu0.1UNKNOWN
ubuntu13.04noarchtelepathy-idle< 0.1.14-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	telepathy-idle	< 0.1.11-2ubuntu0.1	UNKNOWN
ubuntu	12.10	noarch	telepathy-idle	< 0.1.12-1ubuntu0.1	UNKNOWN
ubuntu	13.04	noarch	telepathy-idle	< 0.1.14-1ubuntu0.1	UNKNOWN