/ 
IO-Socket-SSL-0.90
Security Advisories (1)
CVE-2010-4334 (2011-01-14)

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

Modules

IO::Socket::SSL
Nearly transparent SSL encapsulation for IO::Socket::INET.

Provides

IO::Socket::SSL::SSL_Context
in SSL.pm
IO::Socket::SSL::SSL_HANDLE
in SSL.pm

Examples

Other files