medium5.8
CVE-2011-4092
obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.
Impact
obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ubuntu Developers | Obby | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2011/10/30/5
- http://www.openwall.com/lists/oss-security/2011/10/31/1
- https://bugzilla.redhat.com/show_bug.cgi?id=750636
- http://www.openwall.com/lists/oss-security/2011/10/30/5
- http://www.openwall.com/lists/oss-security/2011/10/31/1
- https://bugzilla.redhat.com/show_bug.cgi?id=750636