CVE-2011-5242

tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

• themattharris tmhoauth (<= 0.60) • themattharris tmhoauth 0.2 • themattharris tmhoauth 0.3 • themattharris tmhoauth 0.4 • themattharris tmhoauth 0.5 • themattharris tmhoauth 0.11 • themattharris tmhoauth 0.12 • themattharris tmhoauth 0.13 • themattharris tmhoauth 0.14 • themattharris tmhoauth 0.51 • themattharris tmhoauth 0.52 • themattharris tmhoauth 0.53 • themattharris tmhoauth 0.54 • themattharris tmhoauth 0.55 • themattharris tmhoauth 0.56 • themattharris tmhoauth 0.57 • themattharris tmhoauth 0.58