Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:13:56 +0000 bdu:2015-03060 https://cve.radiocsirt.org/vuln/bdu:2015-03060 bdu:2015-03060 https://cve.radiocsirt.org/vuln/bdu:2015-03060 certa-2010-avi-123 — Une vulnérabilité dans sendmail pour IBM AIX permet à un utilisateur distant malintentionné de contourner la politique… https://cve.radiocsirt.org/vuln/certa-2010-avi-123 certa-2010-avi-123 https://cve.radiocsirt.org/vuln/certa-2010-avi-123 EUVD-2026-124968 https://cve.radiocsirt.org/vuln/euvd-2026-124968 EUVD-2026-124968 https://cve.radiocsirt.org/vuln/euvd-2026-124968 fkie_cve-2009-4565 https://cve.radiocsirt.org/vuln/fkie_cve-2009-4565 <p>sendmail before 8.14.4 does not properly handle a &#39;\0&#39; character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> <p>sendmail before 8.14.4 does not properly handle a &#39;\0&#39; character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-4565 GHSA-g4p5-56vp-vcg5 https://cve.radiocsirt.org/vuln/ghsa-g4p5-56vp-vcg5 <p>sendmail before 8.14.4 does not properly handle a &#39;\0&#39; character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> <p>sendmail before 8.14.4 does not properly handle a &#39;\0&#39; character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</p> https://cve.radiocsirt.org/vuln/ghsa-g4p5-56vp-vcg5 gsd-2009-4565 https://cve.radiocsirt.org/vuln/gsd-2009-4565 gsd-2009-4565 https://cve.radiocsirt.org/vuln/gsd-2009-4565 RHSA-2010:0237 — Red Hat Security Advisory: sendmail security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2010:0237 <p>sendmail allows external mail with from address xxx@localhost.localdomain sendmail: incorrect verification of SSL certificate with NUL in name</p> <p>sendmail allows external mail with from address xxx@localhost.localdomain sendmail: incorrect verification of SSL certificate with NUL in name</p> https://cve.radiocsirt.org/vuln/rhsa-2010:0237