CVE

Id
48650  
CVE No.
CVE-2011-0738  
Status
Candidate  
Description
MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate when executing (a) myproxy-logon or (b) myproxy-get-delegation.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528974 48650 CVE-2011-0738 MLIST:[security-announce] 20110118 Globus Security Advisory 2011-01: myproxy-logon identity checking of server  View
528975 48650 CVE-2011-0738 URL:http://lists.globus.org/pipermail/security-announce/2011-January/000018.html  View
528976 48650 CVE-2011-0738 MISC:http://grid.ncsa.illinois.edu/myproxy/security/myproxy-adv-2011-01.txt  View
528977 48650 CVE-2011-0738 FEDORA:FEDORA-2011-0512  View
528978 48650 CVE-2011-0738 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053473.html  View
528979 48650 CVE-2011-0738 FEDORA:FEDORA-2011-0514  View
528980 48650 CVE-2011-0738 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053461.html  View
528981 48650 CVE-2011-0738 BID:45916  View
528982 48650 CVE-2011-0738 URL:http://www.securityfocus.com/bid/45916  View
528983 48650 CVE-2011-0738 OSVDB:70494  View
528984 48650 CVE-2011-0738 URL:http://osvdb.org/70494  View
528985 48650 CVE-2011-0738 SECUNIA:42972  View
528986 48650 CVE-2011-0738 URL:http://secunia.com/advisories/42972  View
528987 48650 CVE-2011-0738 SECUNIA:43103  View
528988 48650 CVE-2011-0738 URL:http://secunia.com/advisories/43103  View
528989 48650 CVE-2011-0738 VUPEN:ADV-2011-0227  View
528990 48650 CVE-2011-0738 URL:http://www.vupen.com/english/advisories/2011/0227  View
528991 48650 CVE-2011-0738 XF:myproxy-ssl-spoofing(64830)  View

Related JVN