Description
Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.
References (19)
Core 19
Core References
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=oss-security&m=127110132019166&w=2
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=oss-security&m=127116251220784&w=2
Patch, Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0856
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1110
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/57790
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1107
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0987
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=oss-security&m=127119240204394&w=2
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39620
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39365
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-929-1
Various Sources x_refsource_confirm
http://irssi.org/news
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=oss-security&m=127098845125270&w=2
Vendor Advisory vendor-advisory
x_refsource_slackware
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.html
Patch x_refsource_confirm
http://github.com/ensc/irssi-proxy/commit/85bbc05b21678e80423815d2ef1dfe26208491ab
Various Sources x_refsource_confirm
http://irssi.org/news/ChangeLog
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39797
Scores
EPSS
0.0156
EPSS Percentile
72.4%
Details
CWE
CWE-20
Status
published
Products (16)
irssi/irssi
0.8.0
irssi/irssi
0.8.1
irssi/irssi
0.8.2
irssi/irssi
0.8.3
irssi/irssi
0.8.4
irssi/irssi
0.8.5
irssi/irssi
0.8.6
irssi/irssi
0.8.7
irssi/irssi
0.8.8
irssi/irssi
0.8.9
... and 6 more
Published
Apr 16, 2010
Tracked Since
Feb 18, 2026