Vulnerability Spotlight: Randombit Botan Library X509 Certificate Validation Bypass Vulnerability

This vulnerability was discovered by Aleksandar Nikolic of Cisco Talos. Overview Talos has discovered a vulnerability in the Randombit Botan library. A programming error exists in a way Botan library implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the […]

from Cisco Blog » Security http://ift.tt/2oF1ipp