WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

DNS response rate limiting can simplify cache poisoning attacks

Cache Poisoning issue exists in DNS Response Rate Limiting.

openstack-*: Inconsistent and non-validating HTTPS client

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.

cumin: server certificate validation is always disabled when connecting to Aviary servers

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it.

elinks/links: does not properly verify SSL certificates

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

cloud-init: insecure transmission of EC2 instance data can lead to root privilege escalation

An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.

nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.

vdsm: certificate generation upon node creation

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks

wpa_supplicant: Improper x509v3 certificate and key file paths sanitization

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

software-properties incorrectly validated TLS certificates

software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a valid certificate bundle was provided. Fixed in software-properties version 0.92.

Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.

dirmngr: Improper dealing with blocking system calls, when verifying a certificate

dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.

Mercurial: Doesn't verify subject Common Name

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.

GUI: Man in the middle attack possible on the GUI to Backend SSL connection

In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAML browser application) to connect to the Red Hat Enterprise Virtualization Manager. An attacker on the local network could use this flaw to conduct a man-in-the-middle attack, tricking the user into thinking they are viewing the Red Hat Enterprise Virtualization Manager when the content is actually attacker-controlled, or modifying actions a user requested Red Hat Enterprise Virtualization Manager to perform.

A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval.