CVE-2020-7043

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0

Description An issue was discovered in openfortivpn when used with OpenSSL before 1.0.2, where the tunnel.c file mishandles certificate validation. This occurs because hostname comparisons do not consider '0' characters, making it vulnerable to attacks such as a good.example.comx00evil.example.com attack.

Recommendations For openfortivpn version 1.11.0, consider updating OpenSSL to version 1.0.2 or later to mitigate the risk of exploitation. As a temporary workaround, restrict the use of certificate validation in tunnel.c until a patch is available.