CVE-2010-0744

Published: Apr 20, 2010Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.

Affected (10)

Products: Alvaro: Alvaros Messenger

1 product

Alvaros Messenger

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Alvaro Alvaros Messenger	Up to 0.98.3
Alvaro Alvaros Messenger	Version 0.83
Alvaro Alvaros Messenger	Version 0.90
Alvaro Alvaros Messenger	Version 0.91
Alvaro Alvaros Messenger	Version 0.92
Alvaro Alvaros Messenger	Version 0.93
Alvaro Alvaros Messenger	Version 0.94
Alvaro Alvaros Messenger	Version 0.95
Alvaro Alvaros Messenger	Version 0.96
Alvaro Alvaros Messenger	Version 0.97

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (30)

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991

Source: secalert@redhat.com

Vendor Advisory

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991

Source: secalert@redhat.com

Vendor Advisory

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991

Source: secalert@redhat.com

Vendor Advisory

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991

Source: secalert@redhat.com

Vendor Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html

Source: secalert@redhat.com

http://seclists.org/bugtraq/2009/Jun/239

Source: secalert@redhat.com

http://secunia.com/advisories/35621

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/39796

Source: secalert@redhat.com

http://www.opensource-archive.org/showthread.php?p=183821

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/03/10/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/04/01/4

Source: secalert@redhat.com

http://www.securityfocus.com/bid/35507

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1109

Source: secalert@redhat.com

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/bugtraq/2009/Jun/239

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35621

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/39796

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.opensource-archive.org/showthread.php?p=183821

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/03/10/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/04/01/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/35507

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1109

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.