Ximian Evolution SSL Man-In-The-Middle Vulnerability
BID:5875
Info
Ximian Evolution SSL Man-In-The-Middle Vulnerability
| Bugtraq ID: | 5875 |
| Class: | Origin Validation Error |
| CVE: |
CVE-2002-1471 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 03 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Discovery credited to Veit Wahlich. |
| Vulnerable: |
Ximian Evolution 1.0.8 Ximian Evolution 1.0.7 Ximian Evolution 1.0.6 Ximian Evolution 1.0.5 Ximian Evolution 1.0.4 Ximian Evolution 1.0.3 |
| Not Vulnerable: |
Ximian Evolution 1.1.1 |
Discussion
Ximian Evolution SSL Man-In-The-Middle Vulnerability
A vulnerability has been discovered in Ximian Evolution's camel component.
Evolution's camel component fails to re-authenticate previously accepted SSL certificates when re-establishing a connection.
Exploitation of this issue potentially allows for an attacker to inject a maliciously constructed certificate, which the camel component will accept as authentic. By doing so, an intruder could intercept and modify SSL traffic.
A vulnerability has been discovered in Ximian Evolution's camel component.
Evolution's camel component fails to re-authenticate previously accepted SSL certificates when re-establishing a connection.
Exploitation of this issue potentially allows for an attacker to inject a maliciously constructed certificate, which the camel component will accept as authentic. By doing so, an intruder could intercept and modify SSL traffic.
Exploit / POC
Ximian Evolution SSL Man-In-The-Middle Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Ximian Evolution SSL Man-In-The-Middle Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Ximian Evolution 1.0.3
Ximian Evolution 1.0.4
Ximian Evolution 1.0.5
Ximian Evolution 1.0.6
Ximian Evolution 1.0.7
Ximian Evolution 1.0.8
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Ximian Evolution 1.0.3
-
Ximian Evolution 1.1.1
http://www.ximian.com/products/evolution/download.html
Ximian Evolution 1.0.4
-
Ximian Evolution 1.1.1
http://www.ximian.com/products/evolution/download.html
Ximian Evolution 1.0.5
-
Ximian Evolution 1.1.1
http://www.ximian.com/products/evolution/download.html
Ximian Evolution 1.0.6
-
Ximian Evolution 1.1.1
http://www.ximian.com/products/evolution/download.html
Ximian Evolution 1.0.7
-
Ximian Evolution 1.1.1
http://www.ximian.com/products/evolution/download.html
Ximian Evolution 1.0.8
-
Ximian Evolution 1.1.1
http://www.ximian.com/products/evolution/download.html
References
Ximian Evolution SSL Man-In-The-Middle Vulnerability
References:
References: