Birebin.com for Android CVE-2014-2993 X.509 Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	67524
Class:	Design Error
CVE:	CVE-2014-2993
Remote:	Yes
Local:	No
Published:	Apr 23 2014 12:00AM
Updated:	Sep 07 2017 01:13PM
Credit:	Sceptive
Vulnerable:	Birebin Birebin.com 0
Not Vulnerable:

Birebin.com for Android CVE-2014-2993 X.509 Certificate Validation Security Bypass Vulnerability

Birebin.com for Android is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

Birebin.com for Android CVE-2014-2993 X.509 Certificate Validation Security Bypass Vulnerability

An attacker can use readily available network utilities to exploit this issue.

Birebin.com for Android CVE-2014-2993 X.509 Certificate Validation Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Birebin.com for Android CVE-2014-2993 X.509 Certificate Validation Security Bypass Vulnerability

References:

• Birebin.com Android App SSL certificate validation weakness ([email protected])
  
• Birebin.com Homepage (Birebin)
  
• CVE-2014-2993 Birebin.com Android App SSL certificate validation weakness (Sceptive)