NVD

Id
12289  
Name
CVE-2010-0744  
Description
aMSN (aka Alvaro"s Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject"s Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-04-20  
Modified Date
2010-05-14  
Seq
2010-0744  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67682 12289 CVE-2010-0744 http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991  View
67683 12289 CVE-2010-0744 http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991  View
67684 12289 CVE-2010-0744 http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991  View
67685 12289 CVE-2010-0744 http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991  View
67686 12289 CVE-2010-0744 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818  View
67687 12289 CVE-2010-0744 FEDORA-2010-7373  View
67688 12289 CVE-2010-0744 FEDORA-2010-7378  View
67689 12289 CVE-2010-0744 20090626 aMSN SSL Certificate Vulnerability  View
67690 12289 CVE-2010-0744 http://www.opensource-archive.org/showthread.php?p=183821  View
67691 12289 CVE-2010-0744 [oss-security] 20100310 CVE Request -- aMSN -- improper SSL certificate validation (MITM)  View
67692 12289 CVE-2010-0744 [oss-security] 20100401 Re: CVE Request -- aMSN -- improper SSL certificate validation (MITM)  View
67693 12289 CVE-2010-0744 35507  View
67694 12289 CVE-2010-0744 ADV-2010-1109  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38082 JVNDB-2010-003867 aMSN における MSN サーバになりすまされる脆弱性 aMSN は、SSL を使った際、件名の Common Name (CN) フィールドまたは X.509 証明書の Subject Alternative Name フィールドのドメイン名と照合するサーバのホスト名を検証しないため、MSN サーバになりすまされる脆弱性が存在します。 CVE-2010-0744 43324 CVE-2010-0744 12289 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003867.html 2010-04-20 2012-06-26 View