Launchpad.net

CVE 2011-4092

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

See the CVE page on Mitre.org for more details.