CVE-2009-4831

Опубликовано: 29 апр. 2010

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.

Ссылки

http://secunia.com/advisories/35620
Broken Link
http://www.securityfocus.com/archive/1/504573/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/35509
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/51400
Third Party Advisory
VDB Entry
http://secunia.com/advisories/35620
Broken Link
http://www.securityfocus.com/archive/1/504573/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/35509
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/51400
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:basic:*:*:*

EPSS

Процентиль: 63%

0.00449

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-4r5v-2f2w-h6rr

github

больше 3 лет назад

BDU:2015-00721

fstec

больше 15 лет назад

Уязвимость программного обеспечения Trillian, позволяющая удаленному злоумышленнику нарушить конфиденциальность и целостность защищаемой информации