CVE-2008-3532 - Secunia.com

CVE Reference: CVE-2008-3532
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3532

Description: The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44220 SAID Secunia Advisory: SA31390 Secunia Advisory: SA33102 REDHAT http://www.redhat.com/support/errata/RHSA-2008-1023.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10979 MISC http://developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2009:025 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm http://developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch http://developer.pidgin.im/ticket/6500 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434

Return to the previous page.

Secunia