3 matches found
PT-2019-20110
Name of the Vulnerable Software and Affected Versions Python versions 3.7 and newer Description The issue arises from the inet aton function accepting trailing characters after a valid IP, which can lead to incorrect validation of hostnames and IP addresses in certificates. This can potentially...
PT-2016-3478
Name of the Vulnerable Software and Affected Versions Python versions prior to 2.7.9 Python versions 3.x prior to 3.3.3 Description The issue arises from improper handling of wildcards in hostnames by the ssl.match hostname function, potentially allowing man-in-the-middle attackers to spoof serve...
PT-2013-6361
Name of the Vulnerable Software and Affected Versions python-virtualenv affected versions not specified Description The issue concerns a change in behavior of the ssl.match hostname function to adhere to RFC 6125. Additionally, python-virtualenv has had its inc dir settings altered to prevent a...