5.8
CVE-2010-0744
- EPSS 0.39%
- Published 20.04.2010 15:30:00
- Last modified 11.04.2025 00:51:21
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.
Data is provided by the National Vulnerability Database (NVD)
Alvaro ≫ Alvaros Messenger Version <= 0.98.3
Alvaro ≫ Alvaros Messenger Version0.83
Alvaro ≫ Alvaros Messenger Version0.90
Alvaro ≫ Alvaros Messenger Version0.91
Alvaro ≫ Alvaros Messenger Version0.92
Alvaro ≫ Alvaros Messenger Version0.93
Alvaro ≫ Alvaros Messenger Version0.94
Alvaro ≫ Alvaros Messenger Version0.95
Alvaro ≫ Alvaros Messenger Version0.96
Alvaro ≫ Alvaros Messenger Version0.97
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.568 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.