The installation functionality in the Novell Kanaka component prior to 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle malicious users to spoof servers via an arbitrary certificate.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
novell kanaka |
||
novell kanaka 2.7 |
Vulmon