Gentoo: GLSA 200909-20 Normal: cURL Certificate Handling Issue

Gentoo Linux Security Advisory GLSA 200909-20 https://security.gentoo.org/ Severity: Normal Title: cURL: Certificate validation error Date: September 25, 2009 Bugs: #281515 ID: 200909-20

Synopsis ======= An error in the X.509 certificate handling of cURL might enable remote attackers to conduct man-in-the-middle attacks.
Background ========= cURL is a command line tool for transferring files with URL syntax, supporting numerous protocols.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/curl < 7.19.6 >= 7.19.6
========== Scott Cantor reported that cURL does not properly handle fields in X.509 certificates that contain an ASCII NUL (\0) characte...