1 results (0.002 seconds)

CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 1

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate. obby (también conocido como libobby) no verifica certificados de servidor SSL, lo que permite a atacantes remotos falsificar servidores a través de un certificado arbitrario. • http://www.openwall.com/lists/oss-security/2011/10/30/5 http://www.openwall.com/lists/oss-security/2011/10/31/1 https://bugzilla.redhat.com/show_bug.cgi?id=750636 • CWE-20: Improper Input Validation •