Описание
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | uses system libgdata |
| hardy | ignored | end of life |
| lucid | released | 2.28.3.1-0ubuntu6.1 |
| natty | not-affected | uses system libgdata |
| oneiric | not-affected | uses system libgdata |
| precise | not-affected | uses system libgdata |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.11.1-1 |
| hardy | DNE | |
| lucid | released | 0.5.2-0ubuntu1.1 |
| maverick | ignored | end of life |
| natty | released | 0.8.0-0ubuntu1.1 |
| oneiric | released | 0.9.1-0ubuntu2.1 |
| precise | not-affected | 0.11.1-1 |
| upstream | released | 0.10.2-1 |
Показывать по
EPSS
5.1 Medium
CVSS2
Связанные уязвимости
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL ...
libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.
Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
5.1 Medium
CVSS2