CVE-2012-5524

 

Published at: - 08-02-2014 01:55

Last modified: - 28-09-2022 11:06

Total changes: - 2

Description

The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• [oss-security] 20121111 Gajim fails to handle invalid certificates-
• GLSA-201401-02-
• https://trac.gajim.org/ticket/7252
• https://trac.gajim.org/query?status=closed&group=resolution&milestone=0.15.3

 

Keywords

NVD

 

CVE-2012-5524

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures