CVE-2013-4488

Опубликовано: 10 окт. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

Конфигурация 1

cpe:2.3:a:libgadu:libgadu:*:*:*:*:*:*:*:*

Версия до 1.11.4 (включая)

EPSS

Процентиль: 66%

0.01115

Низкий

4.3 Medium

CVSS2

CWE-310

CVE-2013-4488

ubuntu

около 12 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVE-2013-4488

redhat

больше 13 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVE-2013-4488

debian

около 12 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL serv ...

GHSA-42c4-xg6q-8r33

github

больше 4 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

ALT-PU-2014-1968

altlinux

больше 12 лет назад

ALT-PU-2014-1968: package `libgadu` update to version 1.12.0-alt1

EPSS

Процентиль: 66%

0.01115

Низкий

4.3 Medium

CVSS2

CWE-310