NVD

Id
29069  
Name
CVE-2014-0139  
Description
cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject"s Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-15  
Modified Date
2017-01-06  
Seq
2014-0139  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153586 29069 CVE-2014-0139 http://advisories.mageia.org/MGASA-2015-0165.html  View
153587 29069 CVE-2014-0139 http://curl.haxx.se/docs/adv_20140326B.html  View
153588 29069 CVE-2014-0139 58615  View
153589 29069 CVE-2014-0139 http://www-01.ibm.com/support/docview.wss?uid=swg21675820  View
153590 29069 CVE-2014-0139 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862  View
153591 29069 CVE-2014-0139 DSA-2902  View
153592 29069 CVE-2014-0139 http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/  View
153593 29069 CVE-2014-0139 http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/  View
153594 29069 CVE-2014-0139 http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/  View
153595 29069 CVE-2014-0139 MDVSA-2015:213  View
153596 29069 CVE-2014-0139 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13267 JVNDB-2014-002142 cURL および libcurl における任意の SSL サーバになりすまされる脆弱性 cURL および libcurl は、OpenSSL、axTLS、QSOSSL または TLS の GSKit ライブラリを使用する場合、X.509 証明書のサブジェクトの Common Name (CN) フィールド内のワイルドカードの IP アドレスを認識するため、任意の SSL サーバになりすまされる脆弱性が存在します。 CVE-2014-0139 67540 CVE-2014-0139 29069 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002142.html 2014-03-26 2015-07-29 View