Published: 30/09/2013 Updated: 08/12/2013

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The X509Extension in pyOpenSSL prior to 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jean-paul calderone pyopenssl 0.11
jean-paul calderone pyopenssl 0.10
jean-paul calderone pyopenssl 0.9
jean-paul calderone pyopenssl 0.8
jean-paul calderone pyopenssl
jean-paul calderone pyopenssl 0.12
jean-paul calderone pyopenssl 0.7
canonical ubuntu linux 12.04
canonical ubuntu linux 13.04
canonical ubuntu linux 10.04
canonical ubuntu linux 12.10

Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet ...

Debian Bug report logs - #722055 python-openssl: CVE-2013-4314: hostname check bypassing vulnerability Package: python-openssl; Maintainer for python-openssl is Sandro Tosi <morph@debianorg>; Source for python-openssl is src:pyopenssl (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Sat, 7 Sep 20 ...

It was discovered that PyOpenSSL, a Python wrapper around the OpenSSL library, does not properly handle certificates with NULL characters in the Subject Alternative Name field A remote attacker in the position to obtain a certificate for 'wwwfooorg\0examplecom' from a CA that a SSL client trusts, could use this to spoof wwwfooorg and conduct ...

The X509Extension in pyOpenSSL before 0131 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority ...

CWE-20 http://www.openwall.com/lists/oss-security/2013/09/06/2 https://mail.python.org/pipermail/pyopenssl-users/2013-September/000478.html https://bugzilla.redhat.com/show_bug.cgi?id=1005325 http://www.ubuntu.com/usn/USN-1965-1 http://www.debian.org/security/2013/dsa-2763 http://lists.opensuse.org/opensuse-updates/2013-11/msg00015.html https://usn.ubuntu.com/1965-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-4314

CVE-2013-4314

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect