Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explore SSL证书认证中间人攻击漏洞(MS02-050)
Vulnerability Description
Internet Explorer是一款流行的WEB浏览程序，SSL是加密通信协议。 Internet Explorer的SSL实现存在问题，远程攻击者可以利用这个漏洞进行中间人攻击。 在通常情况下，WEB站点的管理员通过SSL进行通信加密，要实现加密通信，管理员需要生成证书并由CA证书授权中心签发，该WEB站点的URL会保存在证书的识别名小节中的CN(公用名)字段中。 CA会验证管理员是否合法拥有的CN字段中的URL，签发证书并返回证书。假定管理员尝试对www.thoughtcrime.org进行加密，
CVSS Information
N/A
Vulnerability Type
N/A