CVE-2002-1471 The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote atta...
MediumCVSS 5.0
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ximian evolution | = 1.0.3 | No fix listed |
| ximian evolution | = 1.0.4 | No fix listed |
| ximian evolution | = 1.0.5 | No fix listed |
| ximian evolution | = 1.0.6 | No fix listed |
| ximian evolution | = 1.0.7 | No fix listed |
| ximian evolution | = 1.0.8 | No fix listed |
| debian/evolution(Debian:12) | < 1.2.0-1 | 1.2.0-1 |
| debian/evolution(Debian:13) | < 1.2.0-1 | 1.2.0-1 |
| debian/evolution(Debian:14) | < 1.2.0-1 | 1.2.0-1 |
References
- 20021003 SSL certificate validation problems in Ximian Evolution exploit mailing-list patch vendor-advisory
- evolution-camel-certificate-mitm(10292) patch vdb-entry vendor-advisory
- 5875 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1471 vendor-advisory
- bugs.debian.org issue-tracking