CVE-2012-5821 in Lynxinfo

Summary

Lynx does not verify that the server s certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

11/04/2012

Disclosure

11/04/2012

Entries

1

CPE

ready

CVSS

6.5

EPSS

0.00237

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-5821
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-5821
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-5821/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!