Lucene search
Ubuntu.comUB:CVE-2013-0308HistoryMar 08, 2013 - 12:00 a.m.
CVE-2013-0308
2013-03-0800:00:00
ubuntu.com
ubuntu.com
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
67.8%
The imap-send command in GIT before 1.8.1.4 does not verify that the server
hostname matches a domain name in the subject’s Common Name (CN) or
subjectAltName field of the X.509 certificate, which allows
man-in-the-middle attackers to spoof SSL servers via an arbitrary valid
certificate.
Notes
| Author | Note |
|---|---|
| jdstrand | Debian and Ubuntu’s git does not enable SSL |
Related
veracode
veracode
Man-in-the-middle Attack
2019-01-15 08:58:58
nessus
nessus
openSUSE Security Update : git (openSUSE-SU-2013:0380-1)
2014-06-13 00:00:00
RHEL 6 : git (RHSA-2013:0589)
2013-03-05 00:00:00
Scientific Linux Security Update : git on SL6.x i386/x86_64 (20130304)
2013-03-05 00:00:00
redhat
redhat
(RHSA-2013:0589) Moderate: git security update
2013-03-04 00:00:00
securityvulns
securityvulns
APPLE-SA-2013-09-18-3 Xcode 5.0
2013-10-02 00:00:00
git / Apple Xcode certificate spoofing
2013-10-02 00:00:00
debiancve
debiancve
CVE-2013-0308
2013-03-08 21:55:00
openvas
openvas
Fedora Update for git FEDORA-2013-2829
2013-03-05 00:00:00
Fedora Update for git FEDORA-2013-2763
2013-03-05 00:00:00
RedHat Update for git RHSA-2013:0589-01
2013-03-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package git version 1.8.1.4-alt1
2013-02-22 00:00:00
Security fix for the ALT Linux 10 package git version 1.8.1.4-alt1
2013-02-22 00:00:00
cve
cve
CVE-2013-0308
2013-03-08 21:55:00
fedora
fedora
[SECURITY] Fedora 18 Update: git-1.8.1.4-1.fc18
2013-03-02 20:04:27
[SECURITY] Fedora 17 Update: git-1.7.11.7-3.fc17
2013-03-02 20:05:44
prion
prion
Command injection
2013-03-08 21:55:00
centos
centos
emacs, git, gitk, gitweb, perl security update
2013-03-04 22:46:35
oraclelinux
oraclelinux
git security update
2013-03-04 00:00:00
git security update
2016-03-23 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
67.8%
Related for UB:CVE-2013-0308