CVE-2013-0308

Published: Mar 8, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Affected (1)

Products: Git Scm: Git

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Git Scm Git	Up to 1.8.1.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2013/Sep/msg00007.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-03/msg00007.html

Source: secalert@redhat.com

http://marc.info/?l=git&m=136134619013145&w=2

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0589.html

Source: secalert@redhat.com

http://secunia.com/advisories/52361

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/52443

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/52467

Source: secalert@redhat.com

Vendor Advisory

http://support.apple.com/kb/HT5937

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/58148

Source: secalert@redhat.com

http://www.securitytracker.com/id/1028205

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=804730

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=909977

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/82329

Source: secalert@redhat.com

https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2013/Sep/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-03/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=git&m=136134619013145&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0589.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/52361

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/52443

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/52467

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT5937

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/58148

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1028205

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=804730

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=909977

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/82329

Source: af854a3a-2127-422b-91ae-364da2661108

https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.