POCO C++ Libraries CVE-2014-0350 SSL Certificate Validation Security Bypass Vulnerability
BID:67055
Info
POCO C++ Libraries CVE-2014-0350 SSL Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 67055 |
| Class: | Design Error |
| CVE: |
CVE-2014-0350 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2014 12:00AM |
| Updated: | Apr 24 2014 12:00AM |
| Credit: | Tuomas Siren and Alexander Berezhnoy |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
POCO C++ Libraries CVE-2014-0350 SSL Certificate Validation Security Bypass Vulnerability
POCO C++ Libraries is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates from the server.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
POCO C++ Libraries 1.4.6p2 and prior are vulnerable.
POCO C++ Libraries is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates from the server.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
POCO C++ Libraries 1.4.6p2 and prior are vulnerable.
Exploit / POC
POCO C++ Libraries CVE-2014-0350 SSL Certificate Validation Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
References
POCO C++ Libraries CVE-2014-0350 SSL Certificate Validation Security Bypass Vulnerability
References:
References: