Lucene search
Veracode Vulnerability DatabaseVERACODE:7860HistoryNov 20, 2018 - 8:55 a.m.
Certificate Spoofing
2018-11-2008:55:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
46.1%
vt-ldap is vulnerable to certificate spoofing. The library does not properly parse and verify the hostname in certificates, allowing an attacker to spoof SSL Servers by spoofing a certificate in conjunction with a man-in-the-middle (MitM) attack.
Related
ubuntucve
ubuntucve
CVE-2014-3607
2018-01-08 00:00:00
debiancve
debiancve
CVE-2014-3607
2018-01-08 19:29:00
osv
osv
Improper Certificate Validation in vt-ldap
2022-05-14 03:47:38
github
github
Improper Certificate Validation in vt-ldap
2022-05-14 03:47:38
prion
prion
Code injection
2018-01-08 19:29:00
cvelist
cvelist
CVE-2014-3607
2018-01-08 19:00:00
ibm
ibm
cve
cve
CVE-2014-3607
2018-01-08 19:29:00
nvd
nvd
CVE-2014-3607
2018-01-08 19:29:00