Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Inetc plugin for Nullsoft Scriptable Install System (NSIS), as used in CERT/CC Failure Observation Engine (FOE) and other products, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and possibly execute arbitrary code by sending a crafted certificate in a download session for Windows executable files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nullsoft Scriptable Install System Inetc插件加密问题漏洞
Vulnerability Description
Nullsoft Scriptable Install System（NSIS）是美国Nullsoft公司的一套基于脚本的用于创建Windows安装程序的开源系统。Inetc（Internet client）是其中的一个在互联网中提供文件上传和下载的插件。 CERT/CC Failure Observation Engine(FOE)中使用的NSIS的Inetc插件存在安全漏洞，该漏洞源于程序没有验证SSL服务器端的X.509证书。攻击者可借助特制的证书利用该漏洞实施中间人攻击，伪造数据，欺骗服务器，执行
CVSS Information
N/A
Vulnerability Type
N/A