Lucene search

K
cve[email protected]CVE-2013-4550
HistoryDec 24, 2013 - 6:55 p.m.

CVE-2013-4550

2013-12-2418:55:03
CWE-310
web.nvd.nist.gov
18
bip
cve-2013-4550
ssl handshake
security vulnerability
remote attackers
nvd

6.6 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.7%

Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268.

Affected configurations

NVD
Node
fedoraprojectfedoraMatch18
OR
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
Node
duckcorpbipRange0.8.8
OR
duckcorpbipMatch0.8.0
OR
duckcorpbipMatch0.8.0rc0
OR
duckcorpbipMatch0.8.0rc1
OR
duckcorpbipMatch0.8.1
OR
duckcorpbipMatch0.8.2
OR
duckcorpbipMatch0.8.3
OR
duckcorpbipMatch0.8.4
OR
duckcorpbipMatch0.8.5
OR
duckcorpbipMatch0.8.6
OR
duckcorpbipMatch0.8.7

6.6 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.7%