Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alvaro aMSN 'SSL'授权问题漏洞
Vulnerability Description
aMSN(即Alvaro's Messenger)中使用SSL时,并不验证服务器主机名是否匹配主题CN字段的域名或X.509证书的主题备选名称字段,受骗用户可以利用任意证书欺骗MSN服务器。
CVSS Information
N/A
Vulnerability Type
N/A