Логотип exploitDog
bind:"CVE-2013-4238"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2013-4238"

Количество 9

Количество 9

ubuntu логотип

CVE-2013-4238

почти 12 лет назад

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS2: 4.3
EPSS: Низкий
redhat логотип

CVE-2013-4238

почти 12 лет назад

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2013-4238

почти 12 лет назад

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2013-4238

почти 12 лет назад

The ssl.match_hostname function in the SSL module in Python 2.6 throug ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-vp8q-678w-8xq9

около 3 лет назад

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

EPSS: Низкий
oracle-oval логотип

ELSA-2013-1582

больше 11 лет назад

ELSA-2013-1582: python security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2020:0086-1

больше 5 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:0114-1

больше 5 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:0234-1

больше 5 лет назад

Security update for python

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-4238

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
redhat логотип
CVE-2013-4238

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
nvd логотип
CVE-2013-4238

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
debian логотип
CVE-2013-4238

The ssl.match_hostname function in the SSL module in Python 2.6 throug ...

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
github логотип
GHSA-vp8q-678w-8xq9

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

4%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2013-1582

ELSA-2013-1582: python security, bug fix, and enhancement update (MODERATE)

больше 11 лет назад
suse-cvrf логотип
openSUSE-SU-2020:0086-1

Security update for python3

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:0114-1

Security update for python3

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:0234-1

Security update for python

больше 5 лет назад

Уязвимостей на страницу