4 November 2012

49 results · Feed

• Medium 5.9
  CVE-2012-3446

  Apache Libcloud vulnerable to certificate impersonation

  Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta…

  apache-libcloud libcloud Debian PyPI
  Nov 4, 2012
• Medium 5.3
  CVE-2012-5825

  Tweepy does not verify SSL Certificate

  Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related…

  tweepy tweepy Debian PyPI
  Nov 4, 2012
• Medium —
  CVE-2012-5784

  Man-in-the-middle attack in Apache Axis

  Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name…

  axis org.apache.axis:axis axis:axis Debian Maven
  Nov 4, 2012
• Unscored —
  CVE-2012-5782

  Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in th…

  Nov 4, 2012
• Unscored —
  CVE-2012-5794

  The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's C…

  Nov 4, 2012
• Medium —
  CVE-2012-5783

  Improper Certificate Validation in Apache Commons HttpClient

  Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

  commons-httpclient commons-httpclient:commons-httpclient Debian Maven
  Nov 4, 2012
• Unscored —
  CVE-2012-5787

  The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN…

  Nov 4, 2012
• Unscored —
  CVE-2012-5803

  The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Co…

  Nov 4, 2012
• Unscored —
  CVE-2012-5788

  The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN)…

  Nov 4, 2012
• Unscored —
  CVE-2012-5824

  Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…

  Nov 4, 2012
• Unscored —
  CVE-2012-5802

  The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Na…

  Nov 4, 2012
• Unscored —
  CVE-2012-5801

  The PayPal module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common …

  Nov 4, 2012
• Unscored —
  CVE-2012-5792

  The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject'…

  Nov 4, 2012
• Unscored —
  CVE-2012-5813

  The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's …

  Nov 4, 2012
• Unscored —
  CVE-2012-5816

  AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Com…

  Nov 4, 2012
• Unscored —
  CVE-2012-5814

  Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain na…

  Nov 4, 2012
• Unscored —
  CVE-2012-5820

  The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the…

  Nov 4, 2012
• Unscored —
  CVE-2012-5798

  The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the su…

  Nov 4, 2012
• Medium —
  CVE-2012-5785

  Apache Axis2 has Improper Input Validation

  Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitra…

  org.apache.axis2:axis2 org.apache.axis2:axis2-transport-http Maven
  Nov 4, 2012
• High 7.4
  CVE-2012-5817

  Improper Input Validation in XFire

  Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all…

  org.codehaus.xfire:xfire-core Maven
  Nov 4, 2012
• Unscored —
  CVE-2012-5799

  The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in…

  Nov 4, 2012
• Unscored —
  CVE-2012-5812

  The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Nam…

  Nov 4, 2012
• Unscored —
  CVE-2012-5800

  The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Na…

  Nov 4, 2012
• Unscored —
  CVE-2012-5811

  The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Comm…

  Nov 4, 2012
• Unscored —
  CVE-2012-5822

  The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Com…

  Nov 4, 2012
• Unscored —
  CVE-2012-5808

  The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common…

  Nov 4, 2012
• Unscored —
  CVE-2012-5797

  The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subje…

  Nov 4, 2012
• Unscored —
  CVE-2012-5790

  PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the sub…

  Nov 4, 2012
• Unscored —
  CVE-2012-5780

  The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN…

  Nov 4, 2012
• Unscored —
  CVE-2012-5807

  The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subje…

  Nov 4, 2012
• Unscored —
  CVE-2012-5804

  The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Comm…

  Nov 4, 2012
• Unscored —
  CVE-2012-5809

  The Groupon Redemptions application for Android does not verify that the server hostname matches a domain name in the s…

  Nov 4, 2012
• Unscored —
  CVE-2012-5805

  The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject'…

  Nov 4, 2012
• Unscored —
  CVE-2012-5806

  The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subjec…

  Nov 4, 2012
• Unscored —
  CVE-2012-5793

  The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's …

  Nov 4, 2012
• Unscored —
  CVE-2012-5821

  Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-…

  Nov 4, 2012
• Unscored —
  CVE-2012-5815

  The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common …

  Nov 4, 2012
• Unscored —
  CVE-2012-5781

  Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's…

  Nov 4, 2012
• Unscored —
  CVE-2012-5789

  PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in …

  Nov 4, 2012
• Unscored —
  CVE-2012-5795

  The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's…

  Nov 4, 2012