Beveiligingsadvies

CVE-2011-4318

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-03-07 01:00:00

Laatst bijgewerkt 2024-08-07 00:01:51

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate for a different hostname.

← Alle CVE's bekijken Bekijk op cve.org ↗