CVE-2012-5824

Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2009-4831.

• CWE-295

• http://secunia.com/advisories/51190Broken Link
• http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdfExploit
• http://www.securityfocus.com/bid/56454Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79915Third Party Advisory, VDB Entry
• http://secunia.com/advisories/51190Broken Link
• http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdfExploit
• http://www.securityfocus.com/bid/56454Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79915Third Party Advisory, VDB Entry

Published

Nov 4, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5818ElephantDrive does not verify that the server hostname match…
• CVE-2012-5819FilesAnywhere does not verify that the server hostname match…7.4
• CVE-2012-5820The developer-account sample code in Google AdMob does not v…
• CVE-2012-5821Lynx does not verify that the server's certificate is signed…5.9
• CVE-2012-5822The contribution feature in Zamboni does not verify that the…7.4
• CVE-2012-5823Open Source Classifieds does not verify that the server host…
• CVE-2012-5825Tweepy does not verify that the server hostname matches a do…
• CVE-2012-5827Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows rem…
• CVE-2012-5828BlackBerry PlayBook before 2.1 has an Information Disclosure…6.5
• CVE-2012-5829Heap-based buffer overflow in the nsWindow::OnExposeEvent fu…
• CVE-2012-5830Use-after-free vulnerability in Mozilla Firefox before 17.0,…8.8
• CVE-2012-5831Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…