Posts Tagged: tls
-
Understanding CVE-2007-5162: Ruby Net::HTTPS Server Certificate CN Validation Flaw
An in-depth look at CVE-2007-5162, a vulnerability in Ruby's Net::HTTPS library that failed to validate server certificate Common Names, enabling man-in-the-middle attacks.
-
Understanding CVE-2007-5770: The Widespread SSL CN Validation Flaw in Ruby
An examination of CVE-2007-5770, where Ruby's core network libraries failed to validate SSL certificate Common Names, enabling MitM attacks.