Lucene search
Ubuntu.comUB:CVE-2014-3604HistoryOct 25, 2014 - 12:00 a.m.
CVE-2014-3604
2014-10-2500:00:00
ubuntu.com
ubuntu.com
17
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
42.3%
Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly
verify that the server hostname matches a domain name in the subject’s
Common Name (CN) field of the X.509 certificate, which allows
man-in-the-middle attackers to spoof SSL servers via an arbitrary valid
certificate.
Related
prion
prion
Design/Logic Flaw
2014-10-25 00:55:00
gitlab
gitlab
Cryptographic Issues
2014-10-24 00:00:00
nessus
nessus
Fedora 21 : not-yet-commons-ssl-0.3.15-2.fc21 (2014-10691)
2014-09-23 00:00:00
Mandriva Linux Security Advisory : not-yet-commons-ssl (MDVSA-2015:141)
2015-03-30 00:00:00
Fedora 19 : not-yet-commons-ssl-0.3.15-2.fc19 (2014-10746)
2014-09-26 00:00:00
securityvulns
securityvulns
Not Yet Commons SSL certificate spoofing
2015-04-19 00:00:00
[ MDVSA-2015:141 ] not-yet-commons-ssl
2015-04-19 00:00:00
cvelist
cvelist
CVE-2014-3604
2014-10-25 00:00:00
cve
cve
CVE-2014-3604
2014-10-25 00:55:03
fedora
fedora
[SECURITY] Fedora 19 Update: not-yet-commons-ssl-0.3.15-2.fc19
2014-09-25 10:37:48
[SECURITY] Fedora 20 Update: not-yet-commons-ssl-0.3.15-2.fc20
2014-09-25 10:32:42
[SECURITY] Fedora 21 Update: not-yet-commons-ssl-0.3.15-2.fc21
2014-09-23 05:10:13
osv
osv
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
2022-05-14 03:59:54
debiancve
debiancve
CVE-2014-3604
2014-10-25 00:55:00
openvas
openvas
Fedora Update for not-yet-commons-ssl FEDORA-2014-10746
2014-10-01 00:00:00
Fedora Update for not-yet-commons-ssl FEDORA-2014-10729
2014-10-01 00:00:00
Mageia: Security Advisory (MGASA-2014-0551)
2022-01-28 00:00:00
github
github
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
2022-05-14 03:59:54
nvd
nvd
CVE-2014-3604
2014-10-25 00:55:03
mageia
mageia
Updated not-yet-commons-ssl packages fix CVE-2014-3604
2014-12-26 20:04:58
redhat
redhat
(RHSA-2015:1888) Important: Red Hat JBoss SOA Platform 5.3.1 security update
2015-10-12 15:22:52
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
42.3%
Related for UB:CVE-2014-3604