CVE ID:	CVE-2014-0092
Description:	lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Test IDs:	1.3.6.1.4.1.25623.1.0.841746   1.3.6.1.4.1.25623.1.1.13.2014.062.01   1.3.6.1.4.1.25623.1.0.850575   1.3.6.1.4.1.25623.1.0.871132   1.3.6.1.4.1.25623.1.1.4.2014.0322.1   1.3.6.1.4.1.25623.1.0.702869   1.3.6.1.4.1.25623.1.0.120522   1.3.6.1.4.1.25623.1.0.871129   1.3.6.1.4.1.25623.1.1.4.2014.0323.1   1.3.6.1.4.1.25623.1.1.4.2014.0320.1   1.3.6.1.4.1.25623.1.1.4.2014.0319.1   1.3.6.1.4.1.25623.1.0.881893   1.3.6.1.4.1.25623.1.0.881895   1.3.6.1.4.1.25623.1.0.123456   1.3.6.1.4.1.25623.1.0.850574   1.3.6.1.4.1.25623.1.0.123455   1.3.6.1.4.1.25623.1.1.10.2014.0117   1.3.6.1.4.1.25623.1.0.850792   1.3.6.1.4.1.25623.1.1.4.2014.0321.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0092 BugTraq ID: 65919 http://www.securityfocus.com/bid/65919 Debian Security Information: DSA-2869 (Google Search) http://www.debian.org/security/2014/dsa-2869 RedHat Security Advisories: RHSA-2014:0246 http://rhn.redhat.com/errata/RHSA-2014-0246.html RedHat Security Advisories: RHSA-2014:0247 http://rhn.redhat.com/errata/RHSA-2014-0247.html RedHat Security Advisories: RHSA-2014:0288 http://rhn.redhat.com/errata/RHSA-2014-0288.html RedHat Security Advisories: RHSA-2014:0339 http://rhn.redhat.com/errata/RHSA-2014-0339.html http://secunia.com/advisories/56933 http://secunia.com/advisories/57103 http://secunia.com/advisories/57204 http://secunia.com/advisories/57254 http://secunia.com/advisories/57260 http://secunia.com/advisories/57274 http://secunia.com/advisories/57321 SuSE Security Announcement: SUSE-SU-2014:0319 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html SuSE Security Announcement: SUSE-SU-2014:0320 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html SuSE Security Announcement: SUSE-SU-2014:0321 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00002.html SuSE Security Announcement: SUSE-SU-2014:0322 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html SuSE Security Announcement: SUSE-SU-2014:0323 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00004.html SuSE Security Announcement: SUSE-SU-2014:0324 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00005.html SuSE Security Announcement: SUSE-SU-2014:0445 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html SuSE Security Announcement: openSUSE-SU-2014:0325 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00006.html SuSE Security Announcement: openSUSE-SU-2014:0328 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00007.html SuSE Security Announcement: openSUSE-SU-2014:0346 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html http://www.ubuntu.com/usn/USN-2127-1