CVE-2010-1155

CVE-2010-1155 describes a vulnerability in Irssi versions prior to 0.8.15, where the IRC client fails to properly validate SSL server certificates. Specifically, it does not verify if the server's hostname matches the domain name in the certificate's Common Name or Subject Alternative Name fields. This flaw allows man-in-the-middle attackers to spoof IRC servers using any valid certificate, affecting the Irssi client. The vulnerability carries a CVSS score of 6.8 (Medium), indicating a network-based attack with medium complexity that could lead to partial confidentiality, integrity, and availability impacts. Attackers could intercept or alter communications between the client and server. Despite its potential impact, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.