CVE-2011-1428 - CVE House
Back to Database
Status published Medium CVE-2011-1428

Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier...

Vulnerability Description

Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-1428

Credits & Attribution

No credits recorded in the NVD database.

References

More from flashtux

View All →
CVE-2012-5854
Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote...
High 7.5
CVE-2012-5534
The hook_process function in the plugin API for WeeChat 0.3.0...
High 7.5
CVE-2009-0661
Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers...
Medium 5

Affected Vendor

Affected Software

weechat
Vulnerable Versions:
0, 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.6.1, 0.2.6.2, 0.2.6.3, 0.3.0, 0.3.1, 0.3.1.1, 0.3.2, 0.3.3

Timeline

Official Publish: March 16th, 2011
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.