Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GnuTLS libgnutls 加密问题漏洞
Vulnerability Description
GnuTLS before 2.8.2的libgnutls并不会很好地处理主体的 (1) Common Name (CN) 或 (2) 一个X.509证书的Subject Alternative Name (SAN) field的一个域名中的 '\0' 字符， 这会允许中间人攻击通过一个合法的认证授权所认证的一个精心设计的证书来骗取任意SSL服务器。
CVSS Information
N/A
Vulnerability Type
N/A