mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-30 18:04:30 +00:00
128 lines
4.3 KiB
JSON
128 lines
4.3 KiB
JSON
{
|
|
"CVE_data_meta" : {
|
|
"ASSIGNER" : "cve@mitre.org",
|
|
"ID" : "CVE-2013-4238",
|
|
"STATE" : "PUBLIC"
|
|
},
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "n/a",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format" : "MITRE",
|
|
"data_type" : "CVE",
|
|
"data_version" : "4.0",
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
|
|
}
|
|
]
|
|
},
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
|
|
"refsource" : "BUGTRAQ",
|
|
"url" : "http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded"
|
|
},
|
|
{
|
|
"name" : "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
|
|
"refsource" : "FULLDISC",
|
|
"url" : "http://seclists.org/fulldisclosure/2014/Dec/23"
|
|
},
|
|
{
|
|
"name" : "http://bugs.python.org/issue18709",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://bugs.python.org/issue18709"
|
|
},
|
|
{
|
|
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=996381",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=996381"
|
|
},
|
|
{
|
|
"name" : "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
|
|
},
|
|
{
|
|
"name" : "DSA-2880",
|
|
"refsource" : "DEBIAN",
|
|
"url" : "http://www.debian.org/security/2014/dsa-2880"
|
|
},
|
|
{
|
|
"name" : "RHSA-2013:1582",
|
|
"refsource" : "REDHAT",
|
|
"url" : "http://rhn.redhat.com/errata/RHSA-2013-1582.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2013:1437",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2013:1438",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2013:1439",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2013:1440",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2013:1462",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html"
|
|
},
|
|
{
|
|
"name" : "openSUSE-SU-2013:1463",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html"
|
|
},
|
|
{
|
|
"name" : "USN-1982-1",
|
|
"refsource" : "UBUNTU",
|
|
"url" : "http://www.ubuntu.com/usn/USN-1982-1"
|
|
}
|
|
]
|
|
}
|
|
}
|