Description

Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.

Remediation

References

CVE-2009-1390

Related Vulnerabilities

WordPress 5.5.x Directory Traversal (5.5 - 5.5.14)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6852)

TYPO3 CVE-2010-0286 Vulnerability (CVE-2010-0286)

WordPress Plugin The Events Calendar Security Bypass (3.11.2)

WordPress Plugin Live Scores for SportsPress Multiple Vulnerabilities (1.9.0)

Severity

Medium

Classification

CVE-2009-1390 CWE-287

Tags

Missing Update Known Vulnerabilities