Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby OCSP_basic_verify() X.509证书验证漏洞
Vulnerability Description
Ruby是一种功能强大的面向对象的脚本语言。 Ruby没有正确地验证X.509证书，在ext/openssl/ossl_ocsp.c文件中以如下方式使用openssl函数： result = OCSP_basic_verify(bs, x509s, x509st, flg); sk_X509_pop_free(x509s, X509_free); if(!result) rb_warn("%s", ERR_error_string(ERR_peek_error(), NULL)); return resu
CVSS Information
N/A
Vulnerability Type
N/A