https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-09T15:41:25.641702+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2009-3941 fkie_cve-2009-3941 2026-10-09T15:41:25.684613+00:00

Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://db.gcve.eu/vuln/ghsa-37wj-ffhc-82xv GHSA-37wj-ffhc-82xv 2026-10-09T15:41:25.684690+00:00

Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

 https://db.gcve.eu/vuln/gsd-2009-3941 gsd-2009-3941 2026-10-09T15:41:25.684714+00:00 gsd-2009-3941 https://db.gcve.eu/vuln/ubuntu-cve-2009-3941 Withdrawn: UBUNTU-CVE-2009-3941 2026-10-09T15:41:25.684727+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: mpop

Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.