CVE-2010-0744 aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name...
MediumCVSS 5.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alvaros messenger | <= 0.98.3 | No fix listed |
| alvaros messenger | = 0.83 | No fix listed |
| alvaros messenger | = 0.90 | No fix listed |
| alvaros messenger | = 0.91 | No fix listed |
| alvaros messenger | = 0.92 | No fix listed |
| alvaros messenger | = 0.93 | No fix listed |
| alvaros messenger | = 0.94 | No fix listed |
| alvaros messenger | = 0.95 | No fix listed |
| alvaros messenger | = 0.96 | No fix listed |
| alvaros messenger | = 0.97 | No fix listed |
References
- amsn.svn.sourceforge.net vendor-advisory
- amsn.svn.sourceforge.net vendor-advisory
- amsn.svn.sourceforge.net vendor-advisory
- amsn.svn.sourceforge.net vendor-advisory
- bugs.debian.org
- FEDORA-2010-7373 vendor-advisory
- FEDORA-2010-7378 vendor-advisory
- 20090626 aMSN SSL Certificate Vulnerability mailing-list
- 35621 third-party-advisory vendor-advisory
- 39796 third-party-advisory
- www.opensource-archive.org
- [oss-security] 20100310 CVE Request -- aMSN -- improper SSL certificate validation (MITM) mailing-list
- [oss-security] 20100401 Re: CVE Request -- aMSN -- improper SSL certificate validation (MITM) mailing-list
- 35507 vdb-entry
- ADV-2010-1109 vdb-entry