Vulnerability in Cerulean Studios Trillian

CVE-2009-4831

Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.

Vulnerability class: Improper Certificate Validation

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Cerulean_studios Trillian — versions 3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, VDB Entry, Broken Link)
cve@mitre.org (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_XF)
cve@mitre.org (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID, Broken Link)