Unscored severity · published Feb 10, 2014
CVE-2011-4092
obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate
–
CVSS
0.8%
EPSS
No
On KEV
Description
obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Obby · Ubuntu Developers
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4092
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4092
www.openwall.com
http://www.openwall.com/lists/oss-security/2011/10/30/5
Exploit
http://www.openwall.com/lists/oss-security/2011/10/31/1
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=750636