CVE-2010-0744

aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.

• CWE-287

• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991Vendor Advisory
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991Vendor Advisory
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991Vendor Advisory
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html
• http://seclists.org/bugtraq/2009/Jun/239
• http://secunia.com/advisories/35621Vendor Advisory
• http://secunia.com/advisories/39796
• http://www.opensource-archive.org/showthread.php?p=183821
• http://www.openwall.com/lists/oss-security/2010/03/10/4
• http://www.openwall.com/lists/oss-security/2010/04/01/4
• http://www.securityfocus.com/bid/35507
• http://www.vupen.com/english/advisories/2010/1109
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991Vendor Advisory
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991Vendor Advisory
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991Vendor Advisory
• http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html
• http://seclists.org/bugtraq/2009/Jun/239
• http://secunia.com/advisories/35621Vendor Advisory
• http://secunia.com/advisories/39796
• http://www.opensource-archive.org/showthread.php?p=183821
• http://www.openwall.com/lists/oss-security/2010/03/10/4
• http://www.openwall.com/lists/oss-security/2010/04/01/4
• http://www.securityfocus.com/bid/35507
• http://www.vupen.com/english/advisories/2010/1109

Published

Apr 20, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0738The JMX-Console web application in JBossAs in Red Hat JBoss …5.3
• CVE-2010-0739Integer overflow in the predospecial function in dospecial.c…
• CVE-2010-0740The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.…
• CVE-2010-0741The virtio_net_bad_features function in hw/virtio-net.c in t…
• CVE-2010-0742The Cryptographic Message Syntax (CMS) implementation in cry…
• CVE-2010-0743Multiple format string vulnerabilities in isns.c in (1) Linu…
• CVE-2010-0745Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 all…
• CVE-2010-0746Directory traversal vulnerability in DeviceKit-disks in Devi…
• CVE-2010-0747drbd8 allows local users to bypass intended restrictions for…7.8
• CVE-2010-0748Transmission before 1.92 allows an attacker to cause a denia…9.8
• CVE-2010-0749Transmission before 1.92 allows attackers to prevent downloa…5.3
• CVE-2010-0750pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows loc…