Lucene search
FreeBSDEBD877B9-7EF4-4375-B1FD-C67780581898HistoryJun 27, 2013 - 12:00 a.m.
ruby -- Hostname check bypassing vulnerability in SSL client
2013-06-2700:00:00
vuxml.freebsd.org
20
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
49.5%
Ruby Developers report:
Ruby’s SSL client implements hostname identity check but it does
not properly handle hostnames in the certificate that contain null
bytes.
Related
nessus
nessus
Mandriva Linux Security Advisory : ruby (MDVSA-2013:201)
2013-07-28 00:00:00
Fedora 17 : ruby-1.9.3.448-31.fc17 (2013-12062)
2013-07-12 00:00:00
CentOS 5 / 6 : ruby (CESA-2013:1090)
2013-07-18 00:00:00
threatpost
threatpost
OpenSSL Man-in-the-middle flaw fixed in Ruby
2013-06-27 12:04:28
redhat
redhat
(RHSA-2013:1103) Moderate: ruby193-ruby security update
2013-07-23 00:00:00
(RHSA-2013:1090) Moderate: ruby security update
2013-07-17 00:00:00
(RHSA-2013:1137) Moderate: ruby193-ruby security update
2013-08-05 00:00:00
openvas
openvas
Fedora Update for ruby FEDORA-2013-12663
2013-08-20 00:00:00
CentOS Update for ruby CESA-2013:1090 centos6
2013-08-01 00:00:00
Fedora Update for ruby FEDORA-2013-12663
2013-08-20 00:00:00
securityvulns
securityvulns
Ruby certificate spoofing
2013-07-01 00:00:00
[slackware-security] ruby (SSA:2013-178-01)
2013-07-01 00:00:00
Apple Mac OS X multiple security vulnerabilities
2014-02-28 00:00:00
centos
centos
ruby security update
2013-07-17 19:44:42
fedora
fedora
[SECURITY] Fedora 19 Update: ruby-2.0.0.247-14.fc19
2013-07-16 01:36:47
[SECURITY] Fedora 18 Update: ruby-1.9.3.448-31.fc18
2013-07-11 02:28:11
[SECURITY] Fedora 19 Update: ruby-2.0.0.353-16.fc19
2013-12-04 07:01:16
mageia
mageia
Updated ruby packages fix CVE-2013-4073
2013-07-26 15:29:37
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 08:56:39
oraclelinux
oraclelinux
ruby security update
2013-07-17 00:00:00
ubuntu
ubuntu
Ruby vulnerability
2013-07-09 00:00:00
slackware
slackware
[slackware-security] ruby
2013-06-28 01:16:46
f5
f5
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
SOL15683 - Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
osv
osv
ruby1.9.1 - several
2013-08-18 00:00:00
ruby1.8 - several
2013-12-04 00:00:00
debian
debian
[SECURITY] [DSA 2738-1] ruby1.9.1 security update
2013-08-18 16:58:53
[SECURITY] [DSA 2809-1] ruby1.8 security update
2013-12-04 21:28:11
[SECURITY] [DSA 2809-1] ruby1.8 security update
2013-12-04 21:28:11
prion
prion
Design/Logic Flaw
2013-08-18 02:52:00
debiancve
debiancve
CVE-2013-4073
2013-08-18 02:52:00
ubuntucve
ubuntucve
CVE-2013-4073
2013-06-28 00:00:00
cve
cve
CVE-2013-4073
2013-08-18 02:52:00
rubygems
rubygems
CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client
2013-06-26 20:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
49.5%
Related for EBD877B9-7EF4-4375-B1FD-C67780581898