NVD

Id
8369  
Name
CVE-2011-1428  
Description
Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-03-16  
Modified Date
2011-03-22  
Seq
2011-1428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47946 8369 CVE-2011-1428 20110227 weechat does not properly use gnutls and allow an attacker to bypass certificate verification  View
47947 8369 CVE-2011-1428 http://git.savannah.gnu.org/gitweb/?p=weechat.git;a=commit;h=c265cad1c95b84abfd4e8d861f25926ef13b5d91  View
47948 8369 CVE-2011-1428 http://savannah.nongnu.org/patch/index.php?7459  View
47949 8369 CVE-2011-1428 46612  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34150 JVNDB-2011-004392 Chat の Wee Enhanced Environment における SSL chat サーバになりすまされる脆弱性 Chat の Wee Enhanced Environment は、X.509 証明書の件名のドメイン名を照合するサーバホスト名を検証しないため、SSL chat サーバになりすまされる脆弱性が存在します。 CVE-2011-1428 49335 CVE-2011-1428 8369 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004392.html 2011-03-16 2012-03-27 View