CVE

Id
64261  
CVE No.
CVE-2013-4314  
Status
Candidate  
Description
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a "" character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633923 64261 CVE-2013-4314 MLIST:[oss-security] 20130906 Re: CVE request: pyOpenSSL hostname check bypassing vulnerability  View
633924 64261 CVE-2013-4314 URL:http://www.openwall.com/lists/oss-security/2013/09/06/2  View
633925 64261 CVE-2013-4314 MLIST:[pyOpenSSL-Users] 20130904 pyOpenSSL 0.13.1  View
633926 64261 CVE-2013-4314 URL:https://mail.python.org/pipermail/pyopenssl-users/2013-September/000478.html  View
633927 64261 CVE-2013-4314 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1005325  View
633928 64261 CVE-2013-4314 DEBIAN:DSA-2763  View
633929 64261 CVE-2013-4314 URL:http://www.debian.org/security/2013/dsa-2763  View
633930 64261 CVE-2013-4314 SUSE:openSUSE-SU-2013:1648  View
633931 64261 CVE-2013-4314 URL:http://lists.opensuse.org/opensuse-updates/2013-11/msg00015.html  View
633932 64261 CVE-2013-4314 UBUNTU:USN-1965-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23039 JVNDB-2013-004614 Terascale Open-Source Resource and Queue Manager の pbs_mom における任意のジョブを実行される脆弱性 Terascale Open-Source Resource and Queue Manager (別名 TORQUE Resource Manager) の pbs_mom は、非特権ポートによるアクセスを適切に制限しないため、任意のジョブを実行される脆弱性が存在します。 CVE-2013-4319 64261 9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004614.html  View