CVE-2009-2730

libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

• gnu gnutls (<= 2.8.1) • gnu gnutls 1.0.16 • gnu gnutls 1.0.17 • gnu gnutls 1.0.18 • gnu gnutls 1.0.19 • gnu gnutls 1.0.20 • gnu gnutls 1.0.21 • gnu gnutls 1.0.22 • gnu gnutls 1.0.23 • gnu gnutls 1.0.24 • gnu gnutls 1.0.25 • gnu gnutls 1.1.13 • gnu gnutls 1.1.14 • gnu gnutls 1.1.15 • gnu gnutls 1.1.16 • gnu gnutls 1.1.17 • gnu gnutls 1.1.18 • gnu gnutls 1.1.19 • gnu gnutls 1.1.20 • gnu gnutls 1.1.21 • gnu gnutls 1.1.22 • gnu gnutls 1.1.23 • gnu gnutls 1.2.0 • gnu gnutls 1.2.1 • gnu gnutls 1.2.2 • gnu gnutls 1.2.3 • gnu gnutls 1.2.4 • gnu gnutls 1.2.5 • gnu gnutls 1.2.6 • gnu gnutls 1.2.7 • gnu gnutls 1.2.8 • gnu gnutls 1.2.8.1a1 • gnu gnutls 1.2.9 • gnu gnutls 1.2.10 • gnu gnutls 1.2.11 • gnu gnutls 1.3.0 • gnu gnutls 1.3.1 • gnu gnutls 1.3.2 • gnu gnutls 1.3.3 • gnu gnutls 1.3.4 • gnu gnutls 1.3.5 • gnu gnutls 1.4.0 • gnu gnutls 1.4.1 • gnu gnutls 1.4.2 • gnu gnutls 1.4.3 • gnu gnutls 1.4.4 • gnu gnutls 1.4.5 • gnu gnutls 1.5.0 • gnu gnutls 1.5.1 • gnu gnutls 1.5.2 • gnu gnutls 1.5.3 • gnu gnutls 1.5.4 • gnu gnutls 1.5.5 • gnu gnutls 1.6.0 • gnu gnutls 1.6.1 • gnu gnutls 1.6.2 • gnu gnutls 1.6.3 • gnu gnutls 1.7.0 • gnu gnutls 1.7.1 • gnu gnutls 1.7.2 … and 61 more