CVE-2012-5821: Medium severity lynx vulnerability
Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5821?
CVE-2012-5821 has a medium severity rating due to its potential for man-in-the-middle attacks.
How do I fix CVE-2012-5821?
To fix CVE-2012-5821, upgrade Lynx to the latest version that resolves the certificate verification issue.
Which versions of Lynx are affected by CVE-2012-5821?
CVE-2012-5821 affects all versions of Lynx prior to the patched releases that include proper certificate verification.
What types of attacks can CVE-2012-5821 enable?
CVE-2012-5821 can enable man-in-the-middle attacks by allowing an attacker to spoof SSL servers with a malicious certificate.
Is CVE-2012-5821 specific to any operating system?
CVE-2012-5821 primarily affects Lynx on various Ubuntu Linux versions, including 10.04, 11.10, 12.04, and 12.10.