Lucene search

CVE-2013-2153

🗓️ 20 Aug 2013 22:03:55Reported by redhatType

The XML digital signature functionality in Apache Santuario XML Security for C++ before 1.7.1 allows attackers to reuse signatures and spoof content via crafted Reference elements in the Signature

Reporter	Title	Published	Views	Family All 17
securityvulns	CVE-2013-2153: Apache Santuario C++ signature bypass vulnerability	1 Jul 201300:00	–	securityvulns
securityvulns	[SECURITY] [DSA 2710-1] xml-security-c security update	1 Jul 201300:00	–	securityvulns
securityvulns	xml-security-c security vulnerabilities	1 Jul 201300:00	–	securityvulns
NVD	CVE-2013-2153	20 Aug 201322:55	–	nvd
Cvelist	CVE-2013-2153	20 Aug 201322:00	–	cvelist
Prion	Design/Logic Flaw	20 Aug 201322:55	–	prion
Debian CVE	CVE-2013-2153	20 Aug 201322:55	–	debiancve
UbuntuCve	CVE-2013-2153	20 Aug 201300:00	–	ubuntucve
Debian	[SECURITY] [DSA 2710-1] xml-security-c security update	18 Jun 201315:44	–	debian
Debian	[SECURITY] [DSA 2710-1] xml-security-c security update	18 Jun 201315:44	–	debian

Nvd

Node

apache xml_security_for_c\+\+Range≤1.7.0

apache xml_security_for_c\+\+Match0.1.0

apache xml_security_for_c\+\+Match0.2.0

apache xml_security_for_c\+\+Match1.1.0

apache xml_security_for_c\+\+Match1.2.0

apache xml_security_for_c\+\+Match1.2.1

apache xml_security_for_c\+\+Match1.3.0

apache xml_security_for_c\+\+Match1.3.1

apache xml_security_for_c\+\+Match1.4.0

apache xml_security_for_c\+\+Match1.5.0

apache xml_security_for_c\+\+Match1.5.1

apache xml_security_for_c\+\+Match1.6.0

apache xml_security_for_c\+\+Match1.6.1

Source	Link
archives	www.archives.neohapsis.com/archives/fulldisclosure/2013-06/0140.html
svn	www.svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp
lists	www.lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
tenable	www.tenable.com/security/tns-2018-15
santuario	www.santuario.apache.org/secadv.data/CVE-2013-2153.txt
lists	www.lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
debian	www.debian.org/security/2013/dsa-2710

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Aug 2013 22:55Current

6.4Medium risk

Vulners AI Score6.4

CVSS24.3

EPSS0.002

CWE-310