CVE-2002-1407

CVE-2002-1407 describes a critical vulnerability in TinySSL 1.02 and earlier versions, where the software fails to properly validate Basic Constraints for intermediate CA-signed certificates. This flaw enables remote attackers to conduct man-in-the-middle attacks, effectively spoofing trusted websites. With a CVSS score of 7.5, this vulnerability is considered high severity, allowing for potential compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. Despite its age and high community discussion, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit or ExploitDB.