CVE-2010-1155

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject…

published April 16, 2010

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01562 · 75.1th percentile
Published
2010-04-16T19:00Z
EPSS history
Timeline
  • 16 APR 19:00Z
    Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject…
    cvelistv5