CVE-2013-4073

Severity

68%

Complexity

86%

Confidentiality

106%

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

First reported 11 years ago

2013-08-18 02:52:00

Last updated 6 years ago

2018-08-13 21:47:00

Affected Software

Ruby-lang Ruby 1.8.6-26

1.8.6-26

ruby-lang Ruby 1.8.7

1.8.7

ruby-lang Ruby 1.8.7-p160

1.8.7

ruby-lang Ruby 1.8.7-p17

1.8.7

ruby-lang Ruby 1.8.7-p173

1.8.7

ruby-lang Ruby 1.8.7-p174

1.8.7

ruby-lang Ruby 1.8.7-p22

1.8.7

ruby-lang Ruby 1.8.7-p248

1.8.7

ruby-lang Ruby 1.8.7-p249

1.8.7

ruby-lang Ruby 1.8.7-p299

1.8.7

ruby-lang Ruby 1.8.7-p301

1.8.7

ruby-lang Ruby 1.8.7-p302

1.8.7

ruby-lang Ruby 1.8.7-p330

1.8.7

ruby-lang Ruby 1.8.7-p334

1.8.7

ruby-lang Ruby 1.8.7-p352

1.8.7

ruby-lang Ruby 1.8.7-p357

1.8.7

ruby-lang Ruby 1.8.7-p358

1.8.7

ruby-lang Ruby 1.8.7-p370

1.8.7

ruby-lang Ruby 1.8.7-p371

1.8.7

Ruby-lang Ruby 1.8.7-p373

1.8.7

ruby-lang Ruby 1.8.7-p71

1.8.7

ruby-lang Ruby 1.8.7-p72

1.8.7

ruby-lang Ruby 1.8.7-preview1

1.8.7

ruby-lang Ruby 1.8.7-preview2

1.8.7

ruby-lang Ruby 1.8.7-preview3

1.8.7

ruby-lang Ruby 1.8.7-preview4

1.8.7

ruby-lang Ruby 1.9.3

1.9.3

ruby-lang Ruby 1.9.3-p0

1.9.3

ruby-lang Ruby 1.9.3-p125

1.9.3

ruby-lang Ruby 1.9.3-p194

1.9.3

ruby-lang Ruby 1.9.3-p286

1.9.3

ruby-lang Ruby 1.9.3-p383

1.9.3

ruby-lang Ruby 1.9.3-p385

1.9.3

ruby-lang Ruby 1.9.3-p392

1.9.3

ruby-lang Ruby 1.9.3-p426

1.9.3

Ruby-lang Ruby 1.9.3-p429

1.9.3

Ruby-lang Ruby 2.0.0-p0

2.0.0

Ruby-lang Ruby 2.0.0-p195

2.0.0

Ruby-lang Ruby 2.0.0-preview1

2.0.0

Ruby-lang Ruby 2.0.0-preview2

2.0.0

Ruby-lang Ruby 2.0.0 rc1

2.0.0

Ruby-lang Ruby 2.0.0 rc2

2.0.0

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.