CVE-2011-0633

Published: May 13, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.

Affected (124)

Products: Gisle Aas: Libwww Perl · Search.cpan: Libwww Perl

1 product

1 product

Configuration A

124 vulnerable

Vulnerable Software	Affected Versions
Gisle Aas Libwww Perl	Version 0.01
Gisle Aas Libwww Perl	Version 0.02
Gisle Aas Libwww Perl	Version 0.03
Gisle Aas Libwww Perl	Version 0.04
Gisle Aas Libwww Perl	Version 5.00
Gisle Aas Libwww Perl	Version 5.01
Gisle Aas Libwww Perl	Version 5.02
Gisle Aas Libwww Perl	Version 5.03
Gisle Aas Libwww Perl	Version 5.04
Gisle Aas Libwww Perl	Version 5.05
Gisle Aas Libwww Perl	Version 5.06
Gisle Aas Libwww Perl	Version 5.07
Gisle Aas Libwww Perl	Version 5.08
Gisle Aas Libwww Perl	Version 5.09
Gisle Aas Libwww Perl	Version 5.10
Gisle Aas Libwww Perl	Version 5.11
Gisle Aas Libwww Perl	Version 5.12
Gisle Aas Libwww Perl	Version 5.13
Gisle Aas Libwww Perl	Version 5.14
Gisle Aas Libwww Perl	Version 5.15
Gisle Aas Libwww Perl	Version 5.16
Gisle Aas Libwww Perl	Version 5.17
Gisle Aas Libwww Perl	Version 5.18
Gisle Aas Libwww Perl	Version 5.18_03
Gisle Aas Libwww Perl	Version 5.18_04
Gisle Aas Libwww Perl	Version 5.18_05
Gisle Aas Libwww Perl	Version 5.19
Gisle Aas Libwww Perl	Version 5.20
Gisle Aas Libwww Perl	Version 5.21
Gisle Aas Libwww Perl	Version 5.22
Gisle Aas Libwww Perl	Version 5.30
Gisle Aas Libwww Perl	Version 5.31
Gisle Aas Libwww Perl	Version 5.32
Gisle Aas Libwww Perl	Version 5.33
Gisle Aas Libwww Perl	Version 5.34
Gisle Aas Libwww Perl	Version 5.35
Gisle Aas Libwww Perl	Version 5.36
Gisle Aas Libwww Perl	Version 5.41
Gisle Aas Libwww Perl	Version 5.42
Gisle Aas Libwww Perl	Version 5.43
Gisle Aas Libwww Perl	Version 5.44
Gisle Aas Libwww Perl	Version 5.45
Gisle Aas Libwww Perl	Version 5.46
Gisle Aas Libwww Perl	Version 5.47
Gisle Aas Libwww Perl	Version 5.48
Gisle Aas Libwww Perl	Version 5.49
Gisle Aas Libwww Perl	Version 5.50
Gisle Aas Libwww Perl	Version 5.51
Gisle Aas Libwww Perl	Version 5.52
Gisle Aas Libwww Perl	Version 5.53
Gisle Aas Libwww Perl	Version 5.53_90
Gisle Aas Libwww Perl	Version 5.53_91
Gisle Aas Libwww Perl	Version 5.53_92
Gisle Aas Libwww Perl	Version 5.53_93
Gisle Aas Libwww Perl	Version 5.53_94
Gisle Aas Libwww Perl	Version 5.53_95
Gisle Aas Libwww Perl	Version 5.53_96
Gisle Aas Libwww Perl	Version 5.53_97
Gisle Aas Libwww Perl	Version 5.60
Gisle Aas Libwww Perl	Version 5.61
Gisle Aas Libwww Perl	Version 5.62
Gisle Aas Libwww Perl	Version 5.63
Gisle Aas Libwww Perl	Version 5.64
Gisle Aas Libwww Perl	Version 5.65
Gisle Aas Libwww Perl	Version 5.66
Gisle Aas Libwww Perl	Version 5.67
Gisle Aas Libwww Perl	Version 5.68
Gisle Aas Libwww Perl	Version 5.69
Gisle Aas Libwww Perl	Version 5.70
Gisle Aas Libwww Perl	Version 5.71
Gisle Aas Libwww Perl	Version 5.72
Gisle Aas Libwww Perl	Version 5.73
Gisle Aas Libwww Perl	Version 5.74
Gisle Aas Libwww Perl	Version 5.75
Gisle Aas Libwww Perl	Version 5.76
Gisle Aas Libwww Perl	Version 5.77
Gisle Aas Libwww Perl	Version 5.78
Gisle Aas Libwww Perl	Version 5.79
Gisle Aas Libwww Perl	Version 5.800
Gisle Aas Libwww Perl	Version 5.801
Gisle Aas Libwww Perl	Version 5.802
Gisle Aas Libwww Perl	Version 5.803
Gisle Aas Libwww Perl	Version 5.804
Gisle Aas Libwww Perl	Version 5.805
Gisle Aas Libwww Perl	Version 5.806
Gisle Aas Libwww Perl	Version 5.807
Gisle Aas Libwww Perl	Version 5.808
Gisle Aas Libwww Perl	Version 5.810
Gisle Aas Libwww Perl	Version 5.811
Gisle Aas Libwww Perl	Version 5.812
Gisle Aas Libwww Perl	Version 5.813
Gisle Aas Libwww Perl	Version 5.814
Gisle Aas Libwww Perl	Version 5.815
Gisle Aas Libwww Perl	Version 5.816
Gisle Aas Libwww Perl	Version 5.817
Gisle Aas Libwww Perl	Version 5.818
Gisle Aas Libwww Perl	Version 5.819
Gisle Aas Libwww Perl	Version 5.820
Gisle Aas Libwww Perl	Version 5.821
Gisle Aas Libwww Perl	Version 5.822
Gisle Aas Libwww Perl	Version 5.823
Gisle Aas Libwww Perl	Version 5.824
Gisle Aas Libwww Perl	Version 5.825
Gisle Aas Libwww Perl	Version 5.826
Gisle Aas Libwww Perl	Version 5.827
Gisle Aas Libwww Perl	Version 5.828
Gisle Aas Libwww Perl	Version 5.829
Gisle Aas Libwww Perl	Version 5.830
Gisle Aas Libwww Perl	Version 5.831
Gisle Aas Libwww Perl	Version 5.832
Gisle Aas Libwww Perl	Version 5.833
Gisle Aas Libwww Perl	Version 5.834
Gisle Aas Libwww Perl	Version 5.836
Gisle Aas Libwww Perl	Version 5b10
Gisle Aas Libwww Perl	Version 5b11
Gisle Aas Libwww Perl	Version 5b12
Gisle Aas Libwww Perl	Version 5b13
Gisle Aas Libwww Perl	Version 5b5
Gisle Aas Libwww Perl	Version 5b6
Gisle Aas Libwww Perl	Version 5b7
Gisle Aas Libwww Perl	Version 5b8
Gisle Aas Libwww Perl	Version 5b9
Search.cpan Libwww Perl	Up to 5.837
Search.cpan Libwww Perl	Version 5.40_01