Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstrated by a good.example.com\x00evil.example.com attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
openfortivpn 信任管理问题漏洞
Vulnerability Description
openfortivpn是一款PPP（点对点协议）+SSL（传输层安全协议） VPN隧道服务的客户端程序。 openfortivpn 1.11.0版本（使用OpenSSL 1.0.2之前版本）中存在安全漏洞，该漏洞源于在比较主机名时没有考虑到‘’字符，导致tunnel.c文件无法正确处理证书的校验。攻击者可利用该漏洞绕过安全限制，获取系统的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A