CVE:CVE-2007-6746
CNNVD:CNNVD-201305-031
telepathy-idle 0.1.15之前的版本中存在漏洞，该漏洞源于程序没有验证(1)发行者是否是可信的CA，(2)在主题的Common Name (CN)中的服务器主机名是否与域名相匹配以及(3)X.509证书的有效期。中间人攻击者可通过任意有效的证书利用该漏洞欺骗SSL服务器。
solution:Upgrade canonical telepathy-idle to a higher version than 0.1.14.1,0.1.10.1,0.1.11.1,0.1.11.2,0.1.12.1,0.1.14,and avoid the version (,0.1.14.1],0.1.10.1,0.1.11.1,0.1.11.2,0.1.12.1,0.1.14; Upgrade canonical ubuntu_linux to a higher version than 12.04,12.10,13.04,and avoid the version 12.04,12.10,13.04