NVD

Id
40142  
Name
CVE-2013-4550  
Description
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-24  
Modified Date
2014-01-03  
Seq
2013-4550  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204281 40142 CVE-2013-4550 FEDORA-2013-21006  View
204282 40142 CVE-2013-4550 FEDORA-2013-21060  View
204283 40142 CVE-2013-4550 FEDORA-2013-21018  View
204284 40142 CVE-2013-4550 [oss-security] 20140102 Re: Duplicated CVE assignment for bip  View
204285 40142 CVE-2013-4550 https://projects.duckcorp.org/issues/261  View
204286 40142 CVE-2013-4550 https://projects.duckcorp.org/versions/13  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24137 JVNDB-2013-005712 Bip における他のソケットに書き込まれる脆弱性 Bip は、デーモンとして実行している場合、stderr がクローズされる前に、以前 stderr に関連付けられていた予期しないファイル記述子に SSL ハンドシェイクエラーを書き込むため、他のソケットに書き込まれるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-4550 64492 CVE-2013-4550 40142 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005712.html 2013-11-08 2013-12-27 View