Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-2730
HistoryAug 12, 2009 - 12:00 a.m.

CVE-2009-2730

2009-08-1200:00:00
ubuntu.com
ubuntu.com
10

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

53.9%

JSON

libgnutls in GnuTLS before 2.8.2 does not properly handle a ‘\0’ character
in a domain name in the subject’s (1) Common Name (CN) or (2) Subject
Alternative Name (SAN) field of an X.509 certificate, which allows
man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted
certificate issued by a legitimate Certification Authority.

Bugs

Notes

Author Note
jdstrand patches in order: http://git.savannah.gnu.org/cgit/gnutls.git/commit/?h=gnutls_2_8_x&id=a431be86124f900c4082e82d32917f86fcce461a http://git.savannah.gnu.org/cgit/gnutls.git/commit/?h=gnutls_2_8_x&id=74b6d92f9675ce4e03642c4d6ced4a3a614b07f6 http://git.savannah.gnu.org/cgit/gnutls.git/commit/?h=gnutls_2_8_x&id=40081594e3de518b998f3e5177ed5a9f7707f2e8 http://git.savannah.gnu.org/cgit/gnutls.git/patch/?id=5a58e9d33448235377afd5fbfcee1683dc70eae3 http://git.savannah.gnu.org/cgit/gnutls.git/patch/?id=1ea190d216767dd4ab93b87361cbcb9d4fb3aafc
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgnutls12< 1.2.9-2ubuntu1.7UNKNOWN
ubuntu8.04noarchgnutls13< 2.0.4-1ubuntu2.6UNKNOWN
ubuntu8.10noarchgnutls26< 2.4.1-1ubuntu0.4UNKNOWN
ubuntu9.04noarchgnutls26< 2.4.2-6ubuntu0.1UNKNOWN
ubuntu9.10noarchgnutls26< 2.6.6-1ubuntu1UNKNOWN

Related

openvas 35
cvelist 1
nessus 21
fedora 2
nvd 1
centos 2
oraclelinux 1
prion 1
slackware 1
freebsd 1
redhat 2
cve 1
securityvulns 2
gentoo 2
osv 1
debian 1
ubuntu 1
vmware 1
openvas
openvas
Oracle: Security Advisory (ELSA-2009-1232)
2015-10-08 00:00:00
Mandrake Security Advisory MDVSA-2009:210 (gnutls)
2009-09-02 00:00:00
Slackware: Security Advisory (SSA:2009-290-01)
2012-09-10 00:00:00
cvelist
cvelist
CVE-2009-2730
2009-08-12 10:00:00
nessus
nessus
Fedora 10 : gnutls-2.4.2-5.fc10 (2009-8622)
2009-09-28 00:00:00
Fedora 11 : gnutls-2.6.6-3.fc11 (2009-8565)
2009-09-28 00:00:00
SuSE9 Security Update : GnuTLS (YOU Patch Number 12501)
2009-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: gnutls-2.6.6-3.fc11
2009-09-25 20:07:02
[SECURITY] Fedora 10 Update: gnutls-2.4.2-5.fc10
2009-09-25 20:10:45
nvd
nvd
CVE-2009-2730
2009-08-12 10:30:01
centos
centos
gnutls security update
2009-08-26 19:50:26
gnutls security update
2009-08-26 21:53:11
oraclelinux
oraclelinux
gnutls security update
2009-08-26 00:00:00
prion
prion
Design/Logic Flaw
2009-08-12 10:30:00
slackware
slackware
gnutls
2009-10-17 17:37:39
freebsd
freebsd
GnuTLS -- improper SSL certificate verification
2009-08-11 00:00:00
redhat
redhat
(RHSA-2009:1232) Moderate: gnutls security update
2009-08-26 00:00:00
(RHSA-2010:0095) Important: rhev-hypervisor security and bug fix update
2010-02-09 00:00:00
cve
cve
CVE-2009-2730
2009-08-12 10:30:01
securityvulns
securityvulns
GnuTLS library certificate spoofing
2009-08-20 00:00:00
[USN-809-1] GnuTLS vulnerabilities
2009-08-20 00:00:00
gentoo
gentoo
GnuTLS: Multiple vulnerabilities
2011-10-10 00:00:00
GnuTLS: Multiple vulnerabilities
2012-06-23 00:00:00
osv
osv
gnutls13 gnutls26 - SSL certificate
2009-11-17 00:00:00
debian
debian
[SECURITY] [DSA 1935-1] New gnutls23/gnutls26 packages fix SSL certificate verification weakness
2009-11-17 13:46:36
ubuntu
ubuntu
GnuTLS vulnerabilities
2009-08-19 00:00:00
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

53.9%

JSON
Related for UB:CVE-2009-2730
openvas35cvelist1nessus21fedora2nvd1centos2oraclelinux1prion1slackware1freebsd1redhat2cve1securityvulns2gentoo2osv1debian1ubuntu1vmware1