CVE-2012-5824
published 2012-11-04CVE-2012-5824: Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…
PriorityP425medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
1.10%
61.5th percentile
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2009-4831.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cerulean_studios | trillian | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/51190http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdfhttp://www.securityfocus.com/bid/56454https://exchange.xforce.ibmcloud.com/vulnerabilities/79915http://secunia.com/advisories/51190http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdfhttp://www.securityfocus.com/bid/56454https://exchange.xforce.ibmcloud.com/vulnerabilities/79915
2012-11-04
Published