CVE-2009-3024

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a…

published August 31, 2009

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00996 · 62.4th percentile
Published
2009-08-31T20:00Z
EPSS history
Timeline
  • 31 AUG 20:00Z
    The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a…
    cvelistv5