CVE-2012-5524

Published: Feb 8, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA.

Affected (45)

Products: Gajim: Gajim

Gajim

1 product

Gajim

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Gajim Gajim	Up to 0.15.2
Gajim Gajim	Version 0.10.1
Gajim Gajim	Version 0.10
Gajim Gajim	Version 0.11.1
Gajim Gajim	Version 0.11.2
Gajim Gajim	Version 0.11.3
Gajim Gajim	Version 0.11.4
Gajim Gajim	Version 0.11
Gajim Gajim	Version 0.12.1
Gajim Gajim	Version 0.12.2
Gajim Gajim	Version 0.12.3
Gajim Gajim	Version 0.12.4
Gajim Gajim	Version 0.12.5
Gajim Gajim	Version 0.12.5 alpha1
Gajim Gajim	Version 0.12.5 beta1
Gajim Gajim	Version 0.12
Gajim Gajim	Version 0.13.1
Gajim Gajim	Version 0.13.2
Gajim Gajim	Version 0.13.3
Gajim Gajim	Version 0.13.4
Gajim Gajim	Version 0.13
Gajim Gajim	Version 0.14.1
Gajim Gajim	Version 0.14.2
Gajim Gajim	Version 0.14.3
Gajim Gajim	Version 0.14.4
Gajim Gajim	Version 0.14
Gajim Gajim	Version 0.15.1
Gajim Gajim	Version 0.15
Gajim Gajim	Version 0.1
Gajim Gajim	Version 0.2.1
Gajim Gajim	Version 0.2
Gajim Gajim	Version 0.3
Gajim Gajim	Version 0.4.1
Gajim Gajim	Version 0.4
Gajim Gajim	Version 0.5.1
Gajim Gajim	Version 0.5
Gajim Gajim	Version 0.6.1
Gajim Gajim	Version 0.6
Gajim Gajim	Version 0.7.1
Gajim Gajim	Version 0.7
Gajim Gajim	Version 0.8.1
Gajim Gajim	Version 0.8.2
Gajim Gajim	Version 0.8
Gajim Gajim	Version 0.9.1
Gajim Gajim	Version 0.9