Lucene search
PRIOn knowledge basePRION:CVE-2013-2100HistorySep 29, 2014 - 10:55 p.m.
Design/Logic Flaw
2014-09-2922:55:00
PRIOn knowledge base
www.prio-n.com
2
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.
Related
cve
cve
CVE-2013-2100
2014-09-29 22:55:07
nessus
nessus
GLSA-201507-16 : Portage: Man-in-the-middle attack
2015-09-23 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201507-16
2015-09-29 00:00:00
nvd
nvd
CVE-2013-2100
2014-09-29 22:55:07
cvelist
cvelist
CVE-2013-2100
2014-09-29 22:00:00
gentoo
gentoo
Portage: Man-in-the-middle attack
2015-07-10 00:00:00