CVE-2010-0744

MEDIUM 5.8CVE-2010-0744 · Published 20/04/2010 · updated 16/06/2026

In short

CVE-2010-0744 is a MEDIUM (CVSS 5.8) vulnerability affecting alvaros messenger (alvaro).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
alvaros messenger alvaro	`= 0.83= 0.90= 0.91= 0.92= 0.93= 0.94= 0.95= 0.96= 0.97≤ 0.98.3`	No fix yet

Description

aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.

References

More vulnerabilities in alvaros messenger

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free