Vulnerabilities > CVE-2002-1407 - Unspecified vulnerability in Adam Megacz Tinyssl

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
adam-megacz
NVD
Published: 2003-04-11
Updated: 2024-11-20

Summary

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.

Vulnerable Configurations

Part Description Count
Application
Adam_Megacz
1

References