CVE-2010-1155

Published: Apr 16, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.

Affected (24)

Products: Irssi: Irssi

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Irssi Irssi	Up to 0.8.15
Irssi Irssi	Version 0.8.0
Irssi Irssi	Version 0.8.10
Irssi Irssi	Version 0.8.10 rc5
Irssi Irssi	Version 0.8.10 rc6
Irssi Irssi	Version 0.8.10 rc7
Irssi Irssi	Version 0.8.10 rc8
Irssi Irssi	Version 0.8.11
Irssi Irssi	Version 0.8.11 rc1
Irssi Irssi	Version 0.8.11 rc2
Irssi Irssi	Version 0.8.12
Irssi Irssi	Version 0.8.12 rc1
Irssi Irssi	Version 0.8.13
Irssi Irssi	Version 0.8.13 rc1
Irssi Irssi	Version 0.8.14
Irssi Irssi	Version 0.8.1
Irssi Irssi	Version 0.8.2
Irssi Irssi	Version 0.8.3
Irssi Irssi	Version 0.8.4
Irssi Irssi	Version 0.8.5
Irssi Irssi	Version 0.8.6
Irssi Irssi	Version 0.8.7
Irssi Irssi	Version 0.8.8
Irssi Irssi	Version 0.8.9

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (38)

http://github.com/ensc/irssi-proxy/commit/85bbc05b21678e80423815d2ef1dfe26208491ab

Source: secalert@redhat.com

http://irssi.org/news

Source: secalert@redhat.com

http://irssi.org/news/ChangeLog

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=127098845125270&w=2

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=127110132019166&w=2

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=127116251220784&w=2

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=127119240204394&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/39365

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/39620

Source: secalert@redhat.com

http://secunia.com/advisories/39797

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-929-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0856

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/0987

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1107

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1110

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/57790

Source: secalert@redhat.com

http://github.com/ensc/irssi-proxy/commit/85bbc05b21678e80423815d2ef1dfe26208491ab

Source: af854a3a-2127-422b-91ae-364da2661108

http://irssi.org/news

Source: af854a3a-2127-422b-91ae-364da2661108

http://irssi.org/news/ChangeLog

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=oss-security&m=127098845125270&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=oss-security&m=127110132019166&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=oss-security&m=127116251220784&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=oss-security&m=127119240204394&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39365

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/39620

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39797

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-929-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0856

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/0987

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1107

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1110

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/57790

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.