Back to search
CVE-2002-1407
Published: Sep 1, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20020805 IE SSL Vulnerability
mailing-list
x_refsource_BUGTRAQ
ssl-ca-certificate-spoofing(9776)
vdb-entry
x_refsource_XF
5410
vdb-entry
x_refsource_BID
20020810 TinySSL Vendor Statement: Basic Constraints Vulnerability
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now