CVE

Id
64497  
CVE No.
CVE-2013-4550  
Status
Candidate  
Description
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635729 64497 CVE-2013-4550 MLIST:[oss-security] 20140102 Re: Duplicated CVE assignment for bip  View
635730 64497 CVE-2013-4550 URL:http://www.openwall.com/lists/oss-security/2014/01/02/9  View
635731 64497 CVE-2013-4550 CONFIRM:https://projects.duckcorp.org/issues/261  View
635732 64497 CVE-2013-4550 CONFIRM:https://projects.duckcorp.org/versions/13  View
635733 64497 CVE-2013-4550 FEDORA:FEDORA-2013-21006  View
635734 64497 CVE-2013-4550 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121868.html  View
635735 64497 CVE-2013-4550 FEDORA:FEDORA-2013-21018  View
635736 64497 CVE-2013-4550 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-November/122278.html  View
635737 64497 CVE-2013-4550 FEDORA:FEDORA-2013-21060  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23583 JVNDB-2013-005158 SPIP の ecrire/action/logout.php におけるクロスサイトリクエストフォージェリの脆弱性 SPIP の ecrire/action/logout.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-4555 64497 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005158.html  View