CVE-2014-0350

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2014-0350

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-0350.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2014-0350

Downstream

DEBIAN-CVE-2014-0350

DLA-1239-1

UBUNTU-CVE-2014-0350

Published

2014-04-26T01:55:04Z

Modified

2025-08-09T19:01:28Z

Summary

[none]

Details

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate.

References

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177471.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177573.html
http://www.kb.cert.org/vuls/id/118748
https://raw.githubusercontent.com/pocoproject/poco/poco-1.4.6p4-release/CHANGELOG

CVE-2014-0350

Affected packages