Lucene search
Gentoo FoundationMGASA-2013-0200HistoryJul 06, 2013 - 6:12 p.m.
Updated axis package fixes security vulnerability
2013-07-0618:12:34
Gentoo Foundation
advisories.mageia.org
7
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
45.9%
Apache Axis did not verify that the server hostname matched the domain name in the subject’s Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name (CVE-2012-5784).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 2 | noarch | axis | <Â 1.4-6.1 | axis-1.4-6.1.mga2 |
Related
nessus
nessus
Oracle Linux 6 : axis (ELSA-2013-0269)
2013-07-12 00:00:00
Amazon Linux AMI : axis (ALAS-2013-164)
2013-09-04 00:00:00
RHEL 6 : devtoolset-2-axis (RHSA-2014:1123)
2014-11-08 00:00:00
redhat
redhat
(RHSA-2013:0683) Moderate: axis security update
2013-03-25 00:00:00
(RHSA-2013:0269) Moderate: axis security update
2013-02-19 00:00:00
(RHSA-2014:1123) Moderate: devtoolset-2-axis security update
2014-09-02 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: axis-1.4-19.fc17
2013-02-01 17:16:41
[SECURITY] Fedora 18 Update: axis-1.4-19.fc18
2013-02-01 16:58:10
f5
f5
SOL14371 - Apache Axis vulnerability CVE-2012-5784
2013-05-06 00:00:00
K14371 : Apache Axis vulnerability CVE-2012-5784
2013-09-25 00:00:00
SOL16821 - Apache Axis vulnerability CVE-2014-3596
2015-06-29 00:00:00
oraclelinux
oraclelinux
axis security update
2013-03-25 00:00:00
axis security update
2013-02-19 00:00:00
openvas
openvas
Fedora Update for axis FEDORA-2013-1194
2013-02-04 00:00:00
Mageia: Security Advisory (MGASA-2013-0200)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-164)
2015-09-08 00:00:00
ibm
ibm
centos
centos
axis security update
2013-03-25 20:27:08
amazon
amazon
Medium: axis
2013-03-02 16:50:00
debiancve
debiancve
CVE-2012-5784
2012-11-04 22:55:00
CVE-2014-3596
2014-08-27 00:55:00
veracode
veracode
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 09:00:12
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 09:01:11
osv
osv
Man-in-the-middle attack in Apache Axis
2020-10-07 17:51:02
axis - security update
2015-03-10 00:00:00
Improper Validation of Certificates in apache axis
2018-10-16 20:50:58
prion
prion
Design/Logic Flaw
2012-11-04 22:55:00
Code injection
2014-08-27 00:55:00
cve
cve
CVE-2012-5784
2012-11-04 22:55:00
CVE-2014-3596
2014-08-27 00:55:00
github
github
Man-in-the-middle attack in Apache Axis
2020-10-07 17:51:02
Improper Validation of Certificates in apache axis
2018-10-16 20:50:58
gitlab
gitlab
Improper Input Validation
2020-10-07 00:00:00
suse
suse
Security update for axis (moderate)
2019-06-07 00:00:00
Security update for axis (moderate)
2019-06-03 00:00:00
ubuntucve
ubuntucve
CVE-2014-3596
2014-08-27 00:00:00
CVE-2012-5784
2012-11-04 00:00:00
debian
debian
[SECURITY] [DLA 169-1] axis security update
2015-03-10 18:47:07
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
45.9%
Related for MGASA-2013-0200