2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2010-0744" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2010-04-20T15:30:00.317" ,
2024-11-22 11:14:00 +00:00
"lastModified" : "2024-11-21T01:12:52.367" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate."
} ,
{
"lang" : "es" ,
"value" : "aMSN (Alvaro's Messenger) v0.98.3 y anteriores, cuando SSL es utilizado, no verifica que el nombre de servidor concuerda con el nombre de dominio en el campo Nombre Com\u00fan del sujeto (CN) o Nombre alternativo del sujeto del certificado X.509, lo que permite a atacantes realizar un ataque de \"man-in-the-middle\" (hombre en el medio) para suplantar un servidor MSN a trav\u00e9s de un certificado de su elecci\u00f3n."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N" ,
2024-11-22 11:14:00 +00:00
"baseScore" : 5.8 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-22 11:14:00 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 4.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-287"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "0.98.3" ,
"matchCriteriaId" : "530E2AC1-125E-4DA0-9DF1-4C57A0997821"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.83:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2253FE27-0FB3-4AAB-AA2E-34E6B97C740F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.90:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2025CF66-DD6D-4C6F-A29B-441B16D3E568"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.91:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EA0930E5-3489-4081-B794-3EE8317DB382"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.92:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AFF45563-B88E-4BE2-9B4C-5CFD623D8E97"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.93:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0B66222D-3FB3-4369-B047-54BC0ADC4A60"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.94:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7E3512E6-FF13-4174-80DE-385F1F5D237F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.95:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "286780E9-7232-4D6A-A44E-21BD25E7A915"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.96:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "37E9E9ED-40FC-4253-8701-8DC6072A8ACF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:alvaro:alvaros_messenger:0.97:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B40C3229-2868-403A-80AE-D6F441299F5F"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://seclists.org/bugtraq/2009/Jun/239" ,
"source" : "secalert@redhat.com"
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/35621" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://secunia.com/advisories/39796" ,
"source" : "secalert@redhat.com"
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.opensource-archive.org/showthread.php?p=183821" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2010/03/10/4" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2010/04/01/4" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securityfocus.com/bid/35507" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.vupen.com/english/advisories/2010/1109" ,
"source" : "secalert@redhat.com"
2024-11-22 11:14:00 +00:00
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://seclists.org/bugtraq/2009/Jun/239" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://secunia.com/advisories/35621" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://secunia.com/advisories/39796" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.opensource-archive.org/showthread.php?p=183821" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2010/03/10/4" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2010/04/01/4" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securityfocus.com/bid/35507" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.vupen.com/english/advisories/2010/1109" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
