CVE-2008-4989

gnutls: certificate chain verification flaw

Severity Score

5.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).

La función _gnutls_x509_verify_certificate en lib/x509/verify.c en libgnutls en GnuTLS antes de v2.6.1 confía en las cadenas de certificado en las que el último certificado es un certificado de confianza arbitraria, auto-firmado, lo que permite a atacantes de tipo "hombre en el medio" (man-in-the-middle) insertar un certificado falso para cualquier Distinguished Name(DN).

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-11-06 CVE Reserved
2008-11-13 CVE Published
2024-02-09 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-295: Improper Certificate Validation

CAPEC

References (32)

URL	Tag	Source
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217	Broken Link
http://secunia.com/advisories/32681	Broken Link
http://secunia.com/advisories/32687	Broken Link
http://secunia.com/advisories/32879	Broken Link
http://secunia.com/advisories/33501	Broken Link
http://secunia.com/advisories/33694	Broken Link
http://secunia.com/advisories/35423	Broken Link
http://wiki.rpath.com/Advisories:rPSA-2008-0322	Broken Link
http://www.gnu.org/software/gnutls/security.html	Product
http://www.securityfocus.com/archive/1/498431/100/0/threaded	Broken Link
http://www.securitytracker.com/id?1021167	Broken Link
http://www.vupen.com/english/advisories/2008/3086	Broken Link
http://www.vupen.com/english/advisories/2009/1567	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/46482	Third Party Advisory
https://issues.rpath.com/browse/RPL-2886	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650	Broken Link

URL	Date	SRC

URL	Date	SRC
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215	2024-02-09
http://www.securityfocus.com/bid/32232	2024-02-09

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html	2024-02-09
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html	2024-02-09
http://secunia.com/advisories/32619	2024-02-09
http://security.gentoo.org/glsa/glsa-200901-10.xml	2024-02-09
http://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1	2024-02-09
http://www.debian.org/security/2009/dsa-1719	2024-02-09
http://www.mandriva.com/security/advisories?name=MDVSA-2008:227	2024-02-09
http://www.redhat.com/support/errata/RHSA-2008-0982.html	2024-02-09
http://www.ubuntu.com/usn/usn-678-2	2024-02-09
https://usn.ubuntu.com/678-1	2024-02-09
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html	2024-02-09
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html	2024-02-09
https://access.redhat.com/security/cve/CVE-2008-4989	2008-11-11
https://bugzilla.redhat.com/show_bug.cgi?id=470079	2008-11-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gnu Search vendor "Gnu"		Gnutls Search vendor "Gnu" for product "Gnutls"				< 2.6.1 Search vendor "Gnu" for product "Gnutls" and version " < 2.6.1"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				8 Search vendor "Fedoraproject" for product "Fedora" and version "8"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				9 Search vendor "Fedoraproject" for product "Fedora" and version "9"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				6.06 Search vendor "Canonical" for product "Ubuntu Linux" and version "6.06"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				7.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "7.10"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				8.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				8.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "8.10"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				4.0 Search vendor "Debian" for product "Debian Linux" and version "4.0"		-		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				>= 10.3 <= 11.1 Search vendor "Opensuse" for product "Opensuse" and version " >= 10.3 <= 11.1"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Search vendor "Suse" for product "Linux Enterprise"				10.0 Search vendor "Suse" for product "Linux Enterprise" and version "10.0"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Search vendor "Suse" for product "Linux Enterprise"				11.0 Search vendor "Suse" for product "Linux Enterprise" and version "11.0"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				10 Search vendor "Suse" for product "Linux Enterprise Server" and version "10"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		-		Affected