Lucene search
HistoryMay 13, 2011 - 10:55 p.m.
CVE-2011-0633
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.4%
The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.
Affected configurations
Node
gisle_aaslibwww-perlMatch0.01
ORgisle_aaslibwww-perlMatch0.02
ORgisle_aaslibwww-perlMatch0.03
ORgisle_aaslibwww-perlMatch0.04
ORgisle_aaslibwww-perlMatch5.00
ORgisle_aaslibwww-perlMatch5.01
ORgisle_aaslibwww-perlMatch5.02
ORgisle_aaslibwww-perlMatch5.03
ORgisle_aaslibwww-perlMatch5.04
ORgisle_aaslibwww-perlMatch5.05
ORgisle_aaslibwww-perlMatch5.06
ORgisle_aaslibwww-perlMatch5.07
ORgisle_aaslibwww-perlMatch5.08
ORgisle_aaslibwww-perlMatch5.09
ORgisle_aaslibwww-perlMatch5.10
ORgisle_aaslibwww-perlMatch5.11
ORgisle_aaslibwww-perlMatch5.12
ORgisle_aaslibwww-perlMatch5.13
ORgisle_aaslibwww-perlMatch5.14
ORgisle_aaslibwww-perlMatch5.15
ORgisle_aaslibwww-perlMatch5.16
ORgisle_aaslibwww-perlMatch5.17
ORgisle_aaslibwww-perlMatch5.18
ORgisle_aaslibwww-perlMatch5.18_03
ORgisle_aaslibwww-perlMatch5.18_04
ORgisle_aaslibwww-perlMatch5.18_05
ORgisle_aaslibwww-perlMatch5.19
ORgisle_aaslibwww-perlMatch5.20
ORgisle_aaslibwww-perlMatch5.21
ORgisle_aaslibwww-perlMatch5.22
ORgisle_aaslibwww-perlMatch5.30
ORgisle_aaslibwww-perlMatch5.31
ORgisle_aaslibwww-perlMatch5.32
ORgisle_aaslibwww-perlMatch5.33
ORgisle_aaslibwww-perlMatch5.34
ORgisle_aaslibwww-perlMatch5.35
ORgisle_aaslibwww-perlMatch5.36
ORgisle_aaslibwww-perlMatch5.41
ORgisle_aaslibwww-perlMatch5.42
ORgisle_aaslibwww-perlMatch5.43
ORgisle_aaslibwww-perlMatch5.44
ORgisle_aaslibwww-perlMatch5.45
ORgisle_aaslibwww-perlMatch5.46
ORgisle_aaslibwww-perlMatch5.47
ORgisle_aaslibwww-perlMatch5.48
ORgisle_aaslibwww-perlMatch5.49
ORgisle_aaslibwww-perlMatch5.50
ORgisle_aaslibwww-perlMatch5.51
ORgisle_aaslibwww-perlMatch5.52
ORgisle_aaslibwww-perlMatch5.53
ORgisle_aaslibwww-perlMatch5.53_90
ORgisle_aaslibwww-perlMatch5.53_91
ORgisle_aaslibwww-perlMatch5.53_92
ORgisle_aaslibwww-perlMatch5.53_93
ORgisle_aaslibwww-perlMatch5.53_94
ORgisle_aaslibwww-perlMatch5.53_95
ORgisle_aaslibwww-perlMatch5.53_96
ORgisle_aaslibwww-perlMatch5.53_97
ORgisle_aaslibwww-perlMatch5.60
ORgisle_aaslibwww-perlMatch5.61
ORgisle_aaslibwww-perlMatch5.62
ORgisle_aaslibwww-perlMatch5.63
ORgisle_aaslibwww-perlMatch5.64
ORgisle_aaslibwww-perlMatch5.65
ORgisle_aaslibwww-perlMatch5.66
ORgisle_aaslibwww-perlMatch5.67
ORgisle_aaslibwww-perlMatch5.68
ORgisle_aaslibwww-perlMatch5.69
ORgisle_aaslibwww-perlMatch5.70
ORgisle_aaslibwww-perlMatch5.71
ORgisle_aaslibwww-perlMatch5.72
ORgisle_aaslibwww-perlMatch5.73
ORgisle_aaslibwww-perlMatch5.74
ORgisle_aaslibwww-perlMatch5.75
ORgisle_aaslibwww-perlMatch5.76
ORgisle_aaslibwww-perlMatch5.77
ORgisle_aaslibwww-perlMatch5.78
ORgisle_aaslibwww-perlMatch5.79
ORgisle_aaslibwww-perlMatch5.800
ORgisle_aaslibwww-perlMatch5.801
ORgisle_aaslibwww-perlMatch5.802
ORgisle_aaslibwww-perlMatch5.803
ORgisle_aaslibwww-perlMatch5.804
ORgisle_aaslibwww-perlMatch5.805
ORgisle_aaslibwww-perlMatch5.806
ORgisle_aaslibwww-perlMatch5.807
ORgisle_aaslibwww-perlMatch5.808
ORgisle_aaslibwww-perlMatch5.810
ORgisle_aaslibwww-perlMatch5.811
ORgisle_aaslibwww-perlMatch5.812
ORgisle_aaslibwww-perlMatch5.813
ORgisle_aaslibwww-perlMatch5.814
ORgisle_aaslibwww-perlMatch5.815
ORgisle_aaslibwww-perlMatch5.816
ORgisle_aaslibwww-perlMatch5.817
ORgisle_aaslibwww-perlMatch5.818
ORgisle_aaslibwww-perlMatch5.819
ORgisle_aaslibwww-perlMatch5.820
ORgisle_aaslibwww-perlMatch5.821
ORgisle_aaslibwww-perlMatch5.822
ORgisle_aaslibwww-perlMatch5.823
ORgisle_aaslibwww-perlMatch5.824
ORgisle_aaslibwww-perlMatch5.825
ORgisle_aaslibwww-perlMatch5.826
ORgisle_aaslibwww-perlMatch5.827
ORgisle_aaslibwww-perlMatch5.828
ORgisle_aaslibwww-perlMatch5.829
ORgisle_aaslibwww-perlMatch5.830
ORgisle_aaslibwww-perlMatch5.831
ORgisle_aaslibwww-perlMatch5.832
ORgisle_aaslibwww-perlMatch5.833
ORgisle_aaslibwww-perlMatch5.834
ORgisle_aaslibwww-perlMatch5.836
ORgisle_aaslibwww-perlMatch5b5
ORgisle_aaslibwww-perlMatch5b6
ORgisle_aaslibwww-perlMatch5b7
ORgisle_aaslibwww-perlMatch5b8
ORgisle_aaslibwww-perlMatch5b9
ORgisle_aaslibwww-perlMatch5b10
ORgisle_aaslibwww-perlMatch5b11
ORgisle_aaslibwww-perlMatch5b12
ORgisle_aaslibwww-perlMatch5b13
ORsearch.cpanlibwww-perlRangeโค5.837
ORsearch.cpanlibwww-perlMatch5.40_01
Related
cve
cve
CVE-2011-0633
2022-10-03 16:15:18
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2011-17)
2015-09-08 00:00:00
Gentoo Security Advisory GLSA 201402-04
2015-09-29 00:00:00
cvelist
cvelist
CVE-2011-0633
2022-10-03 16:15:18
nessus
nessus
SuSE 11.1 Security Update : perl-libwww-perl (SAT Patch Number 4603)
2011-05-31 00:00:00
openSUSE Security Update : perl-libwww-perl (openSUSE-SU-2011:0552-1)
2014-06-13 00:00:00
Amazon Linux AMI : perl-libwww-perl (ALAS-2011-17)
2013-09-04 00:00:00
debiancve
debiancve
CVE-2011-0633
2022-10-03 16:15:18
ubuntucve
ubuntucve
CVE-2011-0633
2011-05-13 00:00:00
amazon
amazon
Medium: perl-libwww-perl
2011-10-31 18:34:00
prion
prion
Design/Logic Flaw
2011-05-13 22:55:00
seebug
seebug
Perl libwww-perl (LWP)ๆจกๅSSL่ฏไนฆ้ช่ฏๅฎๅ
จ็ญ็ฅ็ป่ฟๆผๆด
2011-05-20 00:00:00
gentoo
gentoo
libwww-perl: Multiple vulnerabilities
2014-02-04 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.4%
Related for NVD:CVE-2011-0633