Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pidgin libpurple 加密问题漏洞
Vulnerability Description
Pidgin是一款跨平台的实时通信客户端。libpurple是其中的一个用于开发IM（即时通讯）程序的库。 Pidgin 2.10.9及之前版本的libpurple中的bundled GnuTLS SSL/TLS插件和bundled OpenSSL SSL/TLS插件中存在安全漏洞，该漏洞源于程序验证SSL端X.509证书时没有检查Basic Constraints扩展。攻击者可借助特制的证书利用该漏洞实施中间人攻击，伪造数据，欺骗服务器，获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A