what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Red Hat Security Advisory 2014-1193-01

Posted Sep 15, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-1193-01 - Apache Axis is an implementation of SOAP. It can be used to build both web service clients and servers. It was discovered that Axis incorrectly extracted the host name from an X.509 certificate subject's Common Name field. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.

tags | advisory, web, spoof

systems | linux, redhat

advisories | CVE-2014-3596

SHA-256 | 19e657455acf991df2d00feb9250321dbe674862f71eba14f81135c0e2dec851

Download | Favorite | View

Related Files

No related files