The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2013-03-08T21:00:00
Updated: 2024-08-06T14:25:08.740Z
Reserved: 2012-12-06T00:00:00
Link: CVE-2013-0308
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-03-08T21:55:03.170
Modified: 2024-11-21T01:47:16.487
Link: CVE-2013-0308
Redhat