mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-09 16:05:11 +00:00
259 lines
10 KiB
JSON
259 lines
10 KiB
JSON
{
|
|
"id": "CVE-2010-1192",
|
|
"sourceIdentifier": "security@ubuntu.com",
|
|
"published": "2010-03-31T18:00:00.687",
|
|
"lastModified": "2025-04-11T00:51:21.963",
|
|
"vulnStatus": "Deferred",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "libESMTP, probably 1.0.4 and earlier, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "libESMTP, probablemente en la versi\u00f3n 1.0.4 y anteriores, no maneja adecuadamente el caracter '\\0' en un nombre de dominio en el campo Common Name (CN) de un certificado X.509, lo que permite a atacantes \"man-in-the-middle\" suplantar servidores SSL de su elecci\u00f3n mediante un certificado manipulado expedido por una Autoridad Certificadora leg\u00edtima, un problema relacionado con CVE-2009-2408."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
|
|
"baseScore": 6.8,
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL"
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-310"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "1.0.4",
|
|
"matchCriteriaId": "328A44B9-26D7-498F-B071-ED2C1D63C2F8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.1:-:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A016D2D3-EE76-4DE2-A276-173395F6A063"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.1:a:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AB54FDC2-8A09-41BA-B949-238CA1C2434F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0113758D-DB03-4931-BB33-275D6A3125C6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EDC85F8E-4752-4267-9945-E514424A15E7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "34F9DE95-01E6-4939-A5D5-723A6C26E8C2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2D8EBBED-D518-4FE6-9722-FE96156ADCBF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8F747504-1B8B-4838-B95B-AD8FCA966A2A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.6:a:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F871ED10-3FCA-4E32-8515-AE2211C958D9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.6.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3541B6CC-AFA2-4F62-A857-37577573EEB5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.7.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9021CCAF-5800-4496-A5CE-234A032A2E10"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.7.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "246D55A7-E0C7-4B0D-B949-DCFF68C0634A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9BD3F317-F430-41E6-9082-FE3DFB12EFB1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5218A899-88B9-484A-B6A8-A25960BAA9F1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8EF0F5D8-6991-4FE0-A0A6-D5B52DF3A811"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4AFB4394-0F64-438E-B75D-F3F52CBF08E5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1EE39BF3-425D-4F79-B1E9-01A489C00DE5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5A2CCA42-428A-4F9A-B5CB-CB49D593835B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D0B443A8-E04F-41C1-A186-2A153BE1C269"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7C93C845-A736-4FD3-BF88-3B36E2AC2EE3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "101A6FAC-8566-4E11-93E9-568DC018894F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "134AA471-AEB0-403B-8B60-274E09047263"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C20A0E7C-3036-46F0-9C56-6A5685ED228F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.10:p1:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1E1DC40D-B9B5-4BA6-93FA-08AC7019FC62"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.11:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2D0D5BCE-DAA9-4336-8928-6D5C6842190D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.12:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0FFF7DED-5D47-4FB2-B0CF-ED63BE816259"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E80CB462-C4DB-46F8-B925-AF2A6AABEABE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0:rc1:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2EAF1E2E-9435-465E-B159-22B7CA616730"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5DB9A308-18D7-4737-9EEF-7827F8A20CB9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5C9A1AA9-23FD-49F1-8938-3AA9D3142017"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "51E63477-32B1-498C-8EA8-ADAACBAEB0C3"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
|
|
"source": "security@ubuntu.com"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/03/03/6",
|
|
"source": "security@ubuntu.com"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/03/09/3",
|
|
"source": "security@ubuntu.com"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2010/1107",
|
|
"source": "security@ubuntu.com"
|
|
},
|
|
{
|
|
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/03/03/6",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.openwall.com/lists/oss-security/2010/03/09/3",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2010/1107",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |