|
|
| |
|
| |
myproxy: invalid certificate hostname check
| Package(s): | myproxy |
CVE #(s): | |
| Created: | January 27, 2011 |
Updated: | February 2, 2011 |
| Description: |
From the MyProxy advisory:
The myproxy-logon program (also called myproxy-get-delegation) in
MyProxy versions 5.0 through 5.2 does not abort connections when it
finds that the myproxy-server's certificate is valid and signed by a
trusted certification authority but the certificate does not contain
the expected hostname (or identity given in the MYPROXY_SERVER_DN
environment variable), unless the myproxy-logon -T or myproxy-logon -b
options are given.
|
| Alerts: |
|
( Log in to post comments)
|
|
|