← Back

CVE-2014-9365

nvd nist
Published: Dec 12, 2014Modified: May 6, 2026

JSON object

Loading...
5.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:N
Exploitability: 8.6 / Impact: 4.9
Source: NVD

Description

The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Affected (88)

Products: Python: Python · Apple: Mac Os X
Python
1 product
Python
Apple
1 product
Mac Os X
Configuration A
87 vulnerable
Vulnerable SoftwareAffected Versions
Python
Python
Version 2.0.1
Python
Version 2.0
Python
Version 2.1.1
Python
Version 2.1.2
Python
Version 2.1.3
Python
Version 2.1
Python
Version 2.2.1
Python
Version 2.2.2
Python
Version 2.2.3
Python
Version 2.2
Python
Version 2.3.1
Python
Version 2.3.2
Python
Version 2.3.3
Python
Version 2.3.4
Python
Version 2.3.5
Python
Version 2.3.7
Python
Version 2.4.1
Python
Version 2.4.2
Python
Version 2.4.3
Python
Version 2.4.4
Python
Version 2.4.6
Python
Version 2.5.150
Python
Version 2.5.1
Python
Version 2.5.2
Python
Version 2.5.3
Python
Version 2.5.4
Python
Version 2.5.6
Python
Version 2.6.1
Python
Version 2.6.2150
Python
Version 2.6.2
Python
Version 2.6.3
Python
Version 2.6.4
Python
Version 2.6.5
Python
Version 2.6.6150
Python
Version 2.6.6
Python
Version 2.6.7
Python
Version 2.6.8
Python
Version 2.7.1150
Python
Version 2.7.1150
Python
Version 2.7.1
Python
Version 2.7.1 rc1
Python
Version 2.7.2150
Python
Version 2.7.2 rc1
Python
Version 2.7.3
Python
Version 2.7.4
Python
Version 2.7.5
Python
Version 2.7.6
Python
Version 2.7.7
Python
Version 2.7.8
Python
Version 3.0.1
Python
Version 3.0
Python
Version 3.1.1
Python
Version 3.1.2150
Python
Version 3.1.2
Python
Version 3.1.3
Python
Version 3.1.4
Python
Version 3.1.5
Python
Version 3.1
Python
Version 3.2.0
Python
Version 3.2.1
Python
Version 3.2.2150
Python
Version 3.2.2
Python
Version 3.2.3
Python
Version 3.2.4
Python
Version 3.2.5
Python
Version 3.2.6
Python
Version 3.2
Python
Version 3.2 alpha
Python
Version 3.3.0
Python
Version 3.3.1
Python
Version 3.3.1 rc1
Python
Version 3.3.2
Python
Version 3.3.3
Python
Version 3.3.3 rc1
Python
Version 3.3.3 rc2
Python
Version 3.3.4
Python
Version 3.3.4 rc1
Python
Version 3.3.5
Python
Version 3.3.5 rc1
Python
Version 3.3.5 rc2
Python
Version 3.3.6 rc1
Python
Version 3.3
Python
Version 3.3 beta2
Python
Version 3.4.0
Python
Version 3.4.1
Python
Version 3.4.2
Python
Version 3.4 alpha1
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Mac Os X
Up to 10.10.4

References (26)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.