Lucene search
Gentoo FoundationMGASA-2013-0199HistoryJul 06, 2013 - 6:11 p.m.
Updated jakarta-commons-httpclient package fixes security vulnerability
2013-07-0618:11:31
Gentoo Foundation
advisories.mageia.org
24
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
0.002
Percentile
62.0%
The Jakarta Commons HttpClient component did not verify that the server hostname matched the domain name in the subject’s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name (CVE-2012-5783).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 2 | noarch | jakarta-commons-httpclient | < 3.1-3.1 | jakarta-commons-httpclient-3.1-3.1.mga2 |
Related
nessus
nessus
AIX 7.3 TL 0 : commonshttp (IJ45224)
2023-04-18 00:00:00
RHEL 5 / 6 : jakarta-commons-httpclient (RHSA-2013:0270)
2013-02-20 00:00:00
ibm
ibm
cve
cve
CVE-2012-5783
2012-11-04 22:55:03
CVE-2012-6153
2014-09-04 17:55:04
nvd
nvd
CVE-2012-5783
2012-11-04 22:55:03
CVE-2012-6153
2014-09-04 17:55:04
openvas
openvas
RedHat Update for jakarta-commons-httpclient RHSA-2013:0270-01
2013-02-22 00:00:00
RedHat Update for jakarta-commons-httpclient RHSA-2013:0270-01
2013-02-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0610-1)
2021-06-09 00:00:00
amazon
amazon
Medium: jakarta-commons-httpclient
2013-03-14 22:04:00
Important: jakarta-commons-httpclient
2014-09-17 21:47:00
osv
osv
CGA-7hvw-h9c4-h6h5
2024-06-06 12:23:25
Improper Certificate Validation in apache HttpClient
2022-05-13 01:10:34
CGA-36v2-2382-h797
2024-06-06 12:17:19
wolfi
wolfi
CVE-2012-5783 vulnerabilities
2024-10-09 09:12:24
centos
centos
jakarta security update
2013-02-20 02:59:36
debiancve
debiancve
CVE-2012-5783
2012-11-04 22:55:03
CVE-2012-6153
2014-09-04 17:55:04
redhat
redhat
(RHSA-2013:0270) Moderate: jakarta-commons-httpclient security update
2013-02-19 00:00:00
(RHSA-2013:0682) Moderate: jakarta-commons-httpclient security update
2013-03-25 00:00:00
(RHSA-2013:0680) Moderate: jakarta-commons-httpclient security update
2013-03-25 00:00:00
aix
aix
AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient
2023-04-13 13:44:57
cvelist
cvelist
CVE-2012-5783
2012-11-04 22:00:00
CVE-2012-6153
2014-09-04 17:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: jakarta-commons-httpclient-3.1-12.fc16
2013-02-01 16:49:49
[SECURITY] Fedora 18 Update: jakarta-commons-httpclient-3.1-12.fc18
2013-02-01 16:27:25
[SECURITY] Fedora 17 Update: jakarta-commons-httpclient-3.1-12.fc17
2013-02-01 16:45:35
prion
prion
Code injection
2012-11-04 22:55:00
Design/Logic Flaw
2014-09-04 17:55:00
cgr
cgr
CVE-2012-5783 vulnerabilities
2024-05-19 03:07:16
github
github
Improper Certificate Validation in apache HttpClient
2022-05-13 01:10:34
Improper certificate validation in org.apache.httpcomponents:httpclient
2018-10-17 00:05:15
oraclelinux
oraclelinux
jakarta-commons-httpclient security update
2013-02-19 00:00:00
veracode
veracode
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 08:56:38
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 08:59:46
atlassian
atlassian
f5
f5
SOL15741 - Apache Commons HttpClient vulnerability CVE-2012-6153
2014-10-27 00:00:00
K15364328 : Apache vulnerabilities CVE-2012-5783 and CVE-2012-6153
2016-02-02 00:00:00
K15741 : Apache Commons HttpClient vulnerability CVE-2012-6153
2014-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2012-6153
2014-09-04 00:00:00
CVE-2012-5783
2012-11-04 00:00:00
debian
debian
[SECURITY] [DLA 222-1] commons-httpclient security update
2015-05-19 15:18:39
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0141
2020-09-17 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0141
2020-09-17 00:00:00
ubuntu
ubuntu
Apache Commons HttpClient vulnerabilities
2015-10-14 00:00:00
securityvulns
securityvulns
[USN-2769-1] Apache Commons HttpClient
2015-10-25 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
0.002
Percentile
62.0%
Related for MGASA-2013-0199