Description
The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a man-in-the-middle (MITM) attack.
References
- 20396 third-party-advisory
- SUSE-SA:2006:029 vendor-advisory
- 18193 vdb-entry