CVE

Id
58905  
CVE No.
CVE-2012-5662  
Status
Candidate  
Description
x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject"s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602370 58905 CVE-2012-5662 CONFIRM:http://sourceforge.net/projects/x3270/files/x3270/3.3.12ga12/  View
602371 58905 CVE-2012-5662 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=889373  View
602372 58905 CVE-2012-5662 OSVDB:91572  View
602373 58905 CVE-2012-5662 URL:http://osvdb.org/91572  View
602374 58905 CVE-2012-5662 SECUNIA:52650  View
602375 58905 CVE-2012-5662 URL:http://secunia.com/advisories/52650  View
602376 58905 CVE-2012-5662 XF:x3270-cve20125662-spoofing(82984)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30159 JVNDB-2012-005866 GNU Grep おける整数オーバーフローの脆弱性 GNU Grep には、整数オーバーフローの脆弱性が存在します。 CVE-2012-5667 58905 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005866.html  View