CVE-2009-4831
published 2010-04-29CVE-2009-4831: Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a…
PriorityP428medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
1.37%
68.6th percentile
Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-939c-9c3m-5qxf: Trillian 5
ghsa_unreviewed·2022-05-13·CVSS 5.8
CVE-2012-5824 [MEDIUM] CWE-295 GHSA-939c-9c3m-5qxf: Trillian 5
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2009-4831.
GHSA
GHSA-4r5v-2f2w-h6rr: Cerulean Studios Trillian 3
ghsa_unreviewed·2022-05-02
CVE-2009-4831 [MEDIUM] CWE-295 GHSA-4r5v-2f2w-h6rr: Cerulean Studios Trillian 3
Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/35620http://www.securityfocus.com/archive/1/504573/100/0/threadedhttp://www.securityfocus.com/bid/35509https://exchange.xforce.ibmcloud.com/vulnerabilities/51400http://secunia.com/advisories/35620http://www.securityfocus.com/archive/1/504573/100/0/threadedhttp://www.securityfocus.com/bid/35509https://exchange.xforce.ibmcloud.com/vulnerabilities/51400
2010-04-29
Published