Summary
It was discovered that XChat-GNOME incorrectly verified the hostname in an
SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue
server's certificate, which was signed by a trusted certificate authority,
to perform a machine-in-the-middle attack.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | xchat-gnome | 1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.2 |
References
-
report
https://launchpad.net/bugs/1565000