CVE-2001-1569

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2001-12-31

Last modified

2024-09-17

Affected products

• Openwave Wap Gateway (Cmg)

References

• http://www.iss.net/security_center/static/6814.php
• http://www.securityfocus.com/archive/1/195619