mpop SSL Certificate NULL Character Processing Vulnerability
SECUNIA ADVISORY ID: SA37312
VERIFY ADVISORY: http://secunia.com/advisories/37312/
DESCRIPTION: A vulnerability has been reported in mpop, which can be exploited by malicious people to conduct spoofing attacks.
The vulnerability is caused due to an error when processing SSL certificates containing NULL characters embedded in certain certificate fields and can be exploited to spoof certificates for legitimate domains.
This is related to vulnerability #2 in: SA36093
The vulnerability is reported in versions prior to 1.0.19.
SOLUTION: Update to version 1.0.19.
PROVIDED AND/OR DISCOVERED BY: Independently discovered by Dan Kaminsky and Moxie Marlinspike.
ORIGINAL ADVISORY: http://mpop.sourceforge.net/news.html
OTHER REFERENCES: SA36093: http://secunia.com/advisories/36093/
———————————————————————-