Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2011-1428 | First vendor Publication | 2011-03-16 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5.8 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1428 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-07-12 | Name : Fedora Update for weechat FEDORA-2011-7843 File : nvt/gb_fedora_2011_7843_weechat_fc15.nasl |
| 2011-07-08 | Name : Fedora Update for weechat FEDORA-2011-7839 File : nvt/gb_fedora_2011_7839_weechat_fc14.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 75084 | WeeChat SSL Certificate Verification MitM Server Spoofing Weakness |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-01-07 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2598.nasl - Type : ACT_GATHER_INFO |
| 2011-07-05 | Name : The remote Fedora host is missing a security update. File : fedora_2011-7839.nasl - Type : ACT_GATHER_INFO |
| 2011-07-05 | Name : The remote Fedora host is missing a security update. File : fedora_2011-7843.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:05:40 |
|
| 2024-11-28 12:25:21 |
|
| 2023-11-07 21:47:28 |
|
| 2021-05-05 01:08:17 |
|
| 2021-05-04 12:14:17 |
|
| 2021-04-22 01:15:30 |
|
| 2020-05-23 01:44:15 |
|
| 2020-05-23 00:28:14 |
|
| 2016-04-26 20:40:45 |
|
| 2014-02-17 11:01:35 |
|
| 2013-05-10 22:58:00 |
|
