CVE-2012-5788: Input Validation
The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5788?
CVE-2012-5788 is considered a high severity vulnerability due to its potential to allow man-in-the-middle attacks.
How do I fix CVE-2012-5788?
To mitigate CVE-2012-5788, ensure that SSL connections are verified against the server's hostname.
What are the consequences of exploiting CVE-2012-5788?
Exploitation of CVE-2012-5788 could lead to data interception and potential financial fraud through spoofed SSL connections.
Which versions of PayPal IPN are affected by CVE-2012-5788?
CVE-2012-5788 affects all versions of PayPal IPN prior to a security patch addressing this vulnerability.
Is CVE-2012-5788 still relevant today?
CVE-2012-5788 remains relevant as it highlights ongoing risks in SSL certificate validation practices.