CVE-2013-4248

Published: Aug 18, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected (95)

Products: Canonical: Ubuntu Linux · Php: Php · Redhat: Enterprise Linux

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.04

Configuration B

90 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.4.17
Php Php	Version 5.0.0
Php Php	Version 5.0.0 beta1
Php Php	Version 5.0.0 beta2
Php Php	Version 5.0.0 beta3
Php Php	Version 5.0.0 beta4
Php Php	Version 5.0.0 rc1
Php Php	Version 5.0.0 rc2
Php Php	Version 5.0.0 rc3
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0
Php Php	Version 5.2.10
Php Php	Version 5.2.11
Php Php	Version 5.2.12
Php Php	Version 5.2.13
Php Php	Version 5.2.14
Php Php	Version 5.2.15
Php Php	Version 5.2.16
Php Php	Version 5.2.17
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.7
Php Php	Version 5.2.8
Php Php	Version 5.2.9
Php Php	Version 5.3.0
Php Php	Version 5.3.10
Php Php	Version 5.3.11
Php Php	Version 5.3.12
Php Php	Version 5.3.13
Php Php	Version 5.3.14
Php Php	Version 5.3.15
Php Php	Version 5.3.16
Php Php	Version 5.3.17
Php Php	Version 5.3.18
Php Php	Version 5.3.19
Php Php	Version 5.3.1
Php Php	Version 5.3.20
Php Php	Version 5.3.21
Php Php	Version 5.3.22
Php Php	Version 5.3.23
Php Php	Version 5.3.24
Php Php	Version 5.3.25
Php Php	Version 5.3.26
Php Php	Version 5.3.27
Php Php	Version 5.3.2
Php Php	Version 5.3.3
Php Php	Version 5.3.4
Php Php	Version 5.3.5
Php Php	Version 5.3.6
Php Php	Version 5.3.7
Php Php	Version 5.3.8
Php Php	Version 5.3.9
Php Php	Version 5.4.0
Php Php	Version 5.4.10
Php Php	Version 5.4.11
Php Php	Version 5.4.12
Php Php	Version 5.4.12 rc1
Php Php	Version 5.4.12 rc2
Php Php	Version 5.4.13
Php Php	Version 5.4.13 rc1
Php Php	Version 5.4.14
Php Php	Version 5.4.14 rc1
Php Php	Version 5.4.15 rc1
Php Php	Version 5.4.16 rc1
Php Php	Version 5.4.1
Php Php	Version 5.4.2
Php Php	Version 5.4.3
Php Php	Version 5.4.4
Php Php	Version 5.4.5
Php Php	Version 5.4.6
Php Php	Version 5.4.7
Php Php	Version 5.4.8
Php Php	Version 5.4.9
Php Php	Version 5.5.0
Php Php	Version 5.5.1