CVE-2013-4488

2014-10-1001:55:07

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

48.9%

JSON

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

OSVersionArchitecturePackageVersionFilename
Debian12alllibgadu<= 1:1.12.2-6libgadu_1:1.12.2-6_all.deb
Debian11alllibgadu<= 1:1.12.2-5libgadu_1:1.12.2-5_all.deb
Debian999alllibgadu<= 1:1.12.2-6.1libgadu_1:1.12.2-6.1_all.deb
Debian13alllibgadu<= 1:1.12.2-6.1libgadu_1:1.12.2-6.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libgadu	<= 1:1.12.2-6	libgadu_1:1.12.2-6_all.deb
Debian	11	all	libgadu	<= 1:1.12.2-5	libgadu_1:1.12.2-5_all.deb
Debian	999	all	libgadu	<= 1:1.12.2-6.1	libgadu_1:1.12.2-6.1_all.deb
Debian	13	all	libgadu	<= 1:1.12.2-6.1	libgadu_1:1.12.2-6.1_all.deb