ROS-20261005-73-0013

The vulnerability of the matchhostname function in the Rsync file transfer and synchronization utility is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the match_hostname() function in the Rsync file transfer and synchronization utility allows a attacker to bypass existing security mechanisms.

The vulnerability of the matchhostname function in the Rsync file transfer and synchronization utility is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

Mandriva Linux Security Advisory : bzr (MDVSA-2013:229)

Updated bzr packages fix security vulnerabilities : A denial of service flaw was found in the way SSL module implementation of Python 3 performed matching of the certificate's name in the case it contained many '' wildcard characters. A remote attacker, able to obtain valid certificate with its...

DEBIAN-CVE-2013-4238

The ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate...

CVE-2013-4238

The ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate...