An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider 0 characters, as demonstrated by a good.example.comx00evil.example.com attack.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openfortivpn | Openfortivpn_project | * | 1.12.0 (excluding) |
| Openfortivpn | Ubuntu | bionic | * |
| Openfortivpn | Ubuntu | eoan | * |
| Openfortivpn | Ubuntu | trusty | * |
| Openfortivpn | Ubuntu | upstream | * |