CVE

Id
70195  
CVE No.
CVE-2014-2900  
Status
Candidate  
Description
wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate.  
Phase
Assigned (20140418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669020 70195 CVE-2014-2900 MLIST:[oss-security] 20140417 CVE ids for CyaSSL 2.9.4?  View
669021 70195 CVE-2014-2900 URL:http://seclists.org/oss-sec/2014/q2/126  View
669022 70195 CVE-2014-2900 MLIST:[oss-security] 20140418 Re: CVE ids for CyaSSL 2.9.4?  View
669023 70195 CVE-2014-2900 URL:http://seclists.org/oss-sec/2014/q2/130  View
669024 70195 CVE-2014-2900 CONFIRM:http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html  View
669025 70195 CVE-2014-2900 CONFIRM:http://www.wolfssl.com/yaSSL/Docs-cyassl-changelog.html  View
669026 70195 CVE-2014-2900 BID:66780  View
669027 70195 CVE-2014-2900 URL:http://www.securityfocus.com/bid/66780  View
669028 70195 CVE-2014-2900 SECUNIA:57743  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13387 JVNDB-2014-002262 Siemens SIMATIC S7-1200 CPU デバイスの統合 Web サーバにおけるクロスサイトスクリプティングの脆弱性 Siemens SIMATIC S7-1200 CPU デバイスの統合 Web サーバには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-2908 70195 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002262.html  View