CVE-2013-4238

Published: Aug 18, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected (37)

Products: Canonical: Ubuntu Linux · Python: Python · Opensuse: Opensuse

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04

Configuration B

33 vulnerable

Vulnerable Software	Affected Versions
Python Python	Version 2.6.1
Python Python	Version 2.6.2150
Python Python	Version 2.6.2
Python Python	Version 2.6.3
Python Python	Version 2.6.4
Python Python	Version 2.6.5
Python Python	Version 2.6.6150
Python Python	Version 2.6.6
Python Python	Version 2.6.7
Python Python	Version 2.6.8
Python Python	Version 2.7.1150
Python Python	Version 2.7.1150
Python Python	Version 2.7.1
Python Python	Version 2.7.1 rc1
Python Python	Version 2.7.2150
Python Python	Version 2.7.2 rc1
Python Python	Version 2.7.3
Python Python	Version 3.0.1
Python Python	Version 3.0
Python Python	Version 3.1.1
Python Python	Version 3.1.2150
Python Python	Version 3.1.2
Python Python	Version 3.1.3
Python Python	Version 3.1.4
Python Python	Version 3.1.5
Python Python	Version 3.1
Python Python	Version 3.2.2150
Python Python	Version 3.2.3
Python Python	Version 3.2
Python Python	Version 3.2 alpha
Python Python	Version 3.3
Python Python	Version 3.3 beta2
Python Python	Version 3.4 alpha1

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://bugs.python.org/issue18709

Source: secalert@redhat.com

Patch

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-1582.html

Source: secalert@redhat.com

http://seclists.org/fulldisclosure/2014/Dec/23

Source: secalert@redhat.com

http://www.debian.org/security/2014/dsa-2880

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1982-1

Source: secalert@redhat.com

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=996381

Source: secalert@redhat.com

Patch

http://bugs.python.org/issue18709

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-09/msg00026.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00029.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-09/msg00043.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-1582.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2014/Dec/23

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2880

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1982-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=996381

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.