CVE-2009-2700

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:qt:qt:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.1.5:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.3.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.3.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.3.4:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.3.5:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.4.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.4.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.4.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.4.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.5.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.5.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.5.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.6.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.6.4:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.7.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.7.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.7.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.7.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.7.4:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.7.5:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.8.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.8.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.8.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.8.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:4.8.4:*:*:*:*:*:*:*

History

21 Nov 2024, 01:05

Type Values Removed Values Added
References () http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6 - () http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6 -
References () http://secunia.com/advisories/36536 - Vendor Advisory () http://secunia.com/advisories/36536 - Vendor Advisory
References () http://secunia.com/advisories/36702 - Vendor Advisory () http://secunia.com/advisories/36702 - Vendor Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2009:225 - () http://www.mandriva.com/security/advisories?name=MDVSA-2009:225 -
References () http://www.securityfocus.com/bid/36203 - () http://www.securityfocus.com/bid/36203 -
References () http://www.ubuntu.com/usn/usn-829-1 - () http://www.ubuntu.com/usn/usn-829-1 -
References () http://www.vupen.com/english/advisories/2009/2499 - Vendor Advisory () http://www.vupen.com/english/advisories/2009/2499 - Vendor Advisory

Information

Published : 2009-09-02 17:30

Updated : 2024-11-21 01:05


NVD link : CVE-2009-2700

Mitre link : CVE-2009-2700

CVE.ORG link : CVE-2009-2700


JSON object : View

Products Affected

qt

  • qt
CWE
CWE-20

Improper Input Validation