exploitDog

GHSA-836j-wxpx-3r99

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2011-4092
https://bugzilla.redhat.com/show_bug.cgi?id=750636
http://www.openwall.com/lists/oss-security/2011/10/30/5
http://www.openwall.com/lists/oss-security/2011/10/31/1

EPSS

Процентиль: 54%

0.0081

Низкий

CVE ID

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-4092

ubuntu

больше 12 лет назад

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

CVE-2011-4092

nvd

больше 12 лет назад

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

CVE-2011-4092

debian

больше 12 лет назад

obby (aka libobby) does not verify SSL server certificates, which allo ...

EPSS

Процентиль: 54%

0.0081

Низкий

CVE ID

Дефекты

CWE-20