CVE-2008-3532 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3532
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3532

Description: The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44220 SAID Secunia Advisory: SA31390 Secunia Advisory: SA33102 REDHAT http://www.redhat.com/support/errata/RHSA-2008-1023.html MISC http://developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2009:025 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434 http://developer.pidgin.im/ticket/6500 http://developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch

Return to the previous page.