CVE-2010-1155: Irssi

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.

Affected products

• Irssi Irssi: up to and including 0.8.15; version 0.8.0 only; version 0.8.1 only; version 0.8.2 only; version 0.8.3 only; version 0.8.4 only; …

Published 2010-04-16. Last modified 2026-06-16.