Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD856A6F84-8B30-11DE-8062-00E0815B8DA8
HistoryAug 11, 2009 - 12:00 a.m.

GnuTLS -- improper SSL certificate verification

2009-08-1100:00:00
vuxml.freebsd.org
19

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.1%

JSON

GnuTLS reports:

By using a NUL byte in CN/SAN fields, it was possible to fool
GnuTLS into 1) not printing the entire CN/SAN field value when
printing a certificate and 2) cause incorrect positive matches
when matching a hostname against a certificate.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgnutls< 2.8.3UNKNOWN
FreeBSDanynoarchgnutls-devel< 2.9.0UNKNOWN

Related

redhat 2
openvas 35
nessus 21
cve 1
oraclelinux 1
fedora 2
ubuntucve 1
centos 2
prion 1
slackware 1
securityvulns 2
debian 1
osv 1
gentoo 2
ubuntu 1
vmware 1
redhat
redhat
(RHSA-2009:1232) Moderate: gnutls security update
2009-08-26 00:00:00
(RHSA-2010:0095) Important: rhev-hypervisor security and bug fix update
2010-02-09 00:00:00
openvas
openvas
SLES9: Security update for GnuTLS
2009-10-10 00:00:00
Mandrake Security Advisory MDVSA-2009:210 (gnutls)
2009-09-02 00:00:00
FreeBSD Ports: gnutls
2009-09-02 00:00:00
nessus
nessus
openSUSE 10 Security Update : gnutls (gnutls-6471)
2009-10-06 00:00:00
CentOS 4 / 5 : gnutls (CESA-2009:1232)
2009-08-27 00:00:00
Mandriva Linux Security Advisory : gnutls (MDVSA-2009:210)
2009-08-24 00:00:00
cve
cve
CVE-2009-2730
2009-08-12 10:30:00
oraclelinux
oraclelinux
gnutls security update
2009-08-26 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: gnutls-2.6.6-3.fc11
2009-09-25 20:07:02
[SECURITY] Fedora 10 Update: gnutls-2.4.2-5.fc10
2009-09-25 20:10:45
ubuntucve
ubuntucve
CVE-2009-2730
2009-08-12 00:00:00
centos
centos
gnutls security update
2009-08-26 19:50:26
gnutls security update
2009-08-26 21:53:11
prion
prion
Design/Logic Flaw
2009-08-12 10:30:00
slackware
slackware
gnutls
2009-10-17 17:37:39
securityvulns
securityvulns
GnuTLS library certificate spoofing
2009-08-20 00:00:00
[USN-809-1] GnuTLS vulnerabilities
2009-08-20 00:00:00
debian
debian
[SECURITY] [DSA 1935-1] New gnutls23/gnutls26 packages fix SSL certificate verification weakness
2009-11-17 13:46:36
osv
osv
gnutls13 gnutls26 - SSL certificate
2009-11-17 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2011-10-10 00:00:00
GnuTLS: Multiple vulnerabilities
2012-06-23 00:00:00
ubuntu
ubuntu
GnuTLS vulnerabilities
2009-08-19 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.1%

JSON
Related for 856A6F84-8B30-11DE-8062-00E0815B8DA8
redhat2openvas35nessus21cve1oraclelinux1fedora2ubuntucve1centos2prion1slackware1securityvulns2debian1osv1gentoo2ubuntu1vmware1