CVE-2011-4092 in obby

Summary

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 10/18/2011
• Disclosure: 02/10/2014
• Moderation: VulDB entry created
• Entries: VDB-69273 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00147
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4092
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4092
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4092/