CVE ID:	CVE-2012-5524
Description:	The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA.
Test IDs:	1.3.6.1.4.1.25623.1.0.865505   1.3.6.1.4.1.25623.1.0.121099   1.3.6.1.4.1.25623.1.0.865506
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5524 GLSA-201401-02 http://security.gentoo.org/glsa/glsa-201401-02.xml [oss-security] 20121111 Gajim fails to handle invalid certificates http://www.openwall.com/lists/oss-security/2012/11/11/6 https://trac.gajim.org/query?status=closed&group=resolution&milestone=0.15.3 https://trac.gajim.org/query?status=closed&group=resolution&milestone=0.15.3 https://trac.gajim.org/ticket/7252 https://trac.gajim.org/ticket/7252