![]() | |
| |||||||
| Home | Register | Projects | Blogs | FAQ | Calendar | Search | Today's Posts | Mark Forums Read | Free Directory | Free DNSReport | Tags |
| Notices |
| Advisories Discuss about all newly security flaws classed by CVE entries and reviewed by security experts |
CVE-2007-5770 (Ruby)This is a discussion on "CVE-2007-5770 (Ruby)" within the Advisories part of the Computer Security: Discussions section; The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches ... |
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site, different components than CVE-2007-5162. More... |
| Sponsor | ||
| ||
| |
![]() |
| | |
| cve20075770, ruby | |
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Microsoft Service Packs Going Out of Support - May 2007 | class101 | Security discussions | 0 | 02-05-07 01:08 |
| Office 2007 vulnerability | class101 | Vulnerability MarketPlace | 1 | 25-04-07 22:55 |