|
yaSSL Unspecified Certificate Chain Processing Vulnerability
yaSSL is susceptible to an unspecified certificate chain processing vulnerability. No further details regarding this issue are currently available. This issue may allow improper certificates to be used when authenticating connections. An attacker may use forged certificates to carry out various attacks. It is conjectured that a malicious Web site could take advantage of this by posing as a trusted Web site in phishing style attacks. This could lead to users taking actions such as authenticating or submitting sensitive or private information. Further information about this issue and its impacts are not currently available. This BID will be updated as further information becomes available. |
|
|
Privacy Statement |