Description

Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.

Remediation

References

CVE-2009-1390

Related Vulnerabilities

WordPress Plugin Q and A FAQ and Knowledge Base for WordPress Multiple SQL Injection Vulnerabilities (1.0.6.2)

WordPress Plugin eHive Account Details Cross-Site Scripting (2.1.2)

WordPress Plugin Delete Duplicate Posts Security Bypass (4.1.9.4)

ZenCart Improper Input Validation Vulnerability (CVE-2009-4321)

Joomla CVE-2021-26031 Vulnerability (CVE-2021-26031)

Severity

Medium

Classification

CVE-2009-1390 CWE-287

Tags

Missing Update Known Vulnerabilities