Lucene search
Ubuntu.comUB:CVE-2013-4488HistoryOct 10, 2014 - 12:00 a.m.
CVE-2013-4488
2014-10-1000:00:00
ubuntu.com
ubuntu.com
13
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
48.9%
libgadu before 1.12.0 does not verify X.509 certificates from SSL servers,
which allows man-in-the-middle attackers to spoof servers.
Bugs
- <https://bugzilla.novell.com/show_bug.cgi?id=848653>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4488>
Notes
| Author | Note |
|---|---|
| mdeslaur | we build with the gnutls backend upstream certs don’t actually match host names used, so correct cert validation is difficult. |
Related
nessus
nessus
Fedora 20 : libgadu-1.12.0-0.2.rc1.fc20 (2013-23260)
2013-12-28 00:00:00
Mandriva Linux Security Advisory : libgadu (MDVSA-2014:185)
2014-09-25 00:00:00
Fedora 19 : libgadu-1.12.0-0.2.rc1.fc19 (2013-23517)
2013-12-28 00:00:00
cvelist
cvelist
CVE-2013-4488
2014-10-10 01:00:00
mageia
mageia
Updated libgadu packages fix CVE-2013-4488
2014-09-15 14:36:30
openvas
openvas
Fedora Update for libgadu FEDORA-2013-23517
2013-12-30 00:00:00
Mageia: Security Advisory (MGASA-2014-0375)
2022-01-28 00:00:00
Fedora Update for libgadu FEDORA-2013-23517
2013-12-30 00:00:00
securityvulns
securityvulns
libgadu certificate check bypass
2014-09-29 00:00:00
[ MDVSA-2014:185 ] libgadu
2014-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libgadu-1.12.0-0.2.rc1.fc19
2013-12-28 02:03:02
[SECURITY] Fedora 20 Update: libgadu-1.12.0-0.2.rc1.fc20
2013-12-28 02:03:45
[SECURITY] Fedora 20 Update: libgadu-1.12.0-0.3.rc2.fc20
2014-02-14 08:04:08
nvd
nvd
CVE-2013-4488
2014-10-10 01:55:07
debiancve
debiancve
CVE-2013-4488
2014-10-10 01:55:07
prion
prion
Code injection
2014-10-10 01:55:00
cve
cve
CVE-2013-4488
2014-10-10 01:55:07
gentoo
gentoo
libgadu: Multiple vulnerabilities
2015-08-15 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
48.9%
Related for UB:CVE-2013-4488