Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-4238

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Published

2013-08-18T02:52:22.943

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	canonical	ubuntu_linux	10.04	Yes
Application	python	python	2.6.1	Yes
Application	python	python	2.6.2	Yes
Application	python	python	2.6.3	Yes
Application	python	python	2.6.4	Yes
Application	python	python	2.6.5	Yes
Application	python	python	2.6.6	Yes
Application	python	python	2.6.7	Yes
Application	python	python	2.6.8	Yes
Application	python	python	2.6.2150	Yes
Application	python	python	2.6.6150	Yes
Application	python	python	2.7.1	Yes
Application	python	python	2.7.1	Yes
Application	python	python	2.7.2	Yes
Application	python	python	2.7.3	Yes
Application	python	python	2.7.1150	Yes
Application	python	python	2.7.1150	Yes
Application	python	python	2.7.2150	Yes
Application	python	python	3.0	Yes
Application	python	python	3.0.1	Yes
Application	python	python	3.1	Yes
Application	python	python	3.1.1	Yes
Application	python	python	3.1.2	Yes
Application	python	python	3.1.3	Yes
Application	python	python	3.1.4	Yes
Application	python	python	3.1.5	Yes
Application	python	python	3.1.2150	Yes
Application	python	python	3.2	Yes
Application	python	python	3.2	Yes
Application	python	python	3.2.3	Yes
Application	python	python	3.2.2150	Yes
Application	python	python	3.3	Yes
Application	python	python	3.3	Yes
Application	python	python	3.4	Yes
Operating System	opensuse	opensuse	11.4	Yes
Operating System	opensuse	opensuse	12.2	Yes
Operating System	opensuse	opensuse	12.3	Yes

References

http://bugs.python.org/issue18709 Patch ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html Vendor Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-1582.html ([email protected])
http://seclists.org/fulldisclosure/2014/Dec/23 ([email protected])
http://www.debian.org/security/2014/dsa-2880 ([email protected])
http://www.securityfocus.com/archive/1/534161/100/0/threaded ([email protected])
http://www.ubuntu.com/usn/USN-1982-1 Vendor Advisory ([email protected])
http://www.vmware.com/security/advisories/VMSA-2014-0012.html ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=996381 Patch ([email protected])
http://bugs.python.org/issue18709 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-1582.html (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2014/Dec/23 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2014/dsa-2880 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/534161/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1982-1 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2014-0012.html (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=996381 Patch (af854a3a-2127-422b-91ae-364da2661108)