Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Martin Lambers Subscribe
Filtered by product Mpop
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3941 1 Martin Lambers 1 Mpop 2009-11-18 5.0 MEDIUM N/A
Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.