CVE-2013-4073

ruby: hostname check bypassing vulnerability in SSL client

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

La función OpenSSL::SSL.verify_certificate_identity en lib/openssl/ssl.rb en Ruby v1.8 anterior a v1.8.7-p374, v1.9 anterior a v1.9.3-p448, y v2.0 anterior a v2.0.0-p247 no manejar adecuadamente un carácter “\0” en un nombre de dominio en el campo Subject Alternative Name de un certificado X.509, lo que permite a atacantes "man-in-the-middle" suplantar servidores SSL de su elección mediante un certificado manipulado expedido por una Autoridad Certificadora legítima, un problema relacionado con CVE-2009-2408.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-06-09 CVE Reserved
2013-06-28 CVE Published
2023-03-30 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-310: Cryptographic Issues

CAPEC

References (15)

URL	Tag	Source
http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21	X_refsource_confirm
http://support.apple.com/kb/HT6150	X_refsource_confirm
https://puppet.com/security/cve/cve-2013-4073	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html	2023-11-07
http://lists.opensuse.org/opensuse-updates/2013-07/msg00042.html	2023-11-07
http://lists.opensuse.org/opensuse-updates/2013-07/msg00044.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2013-1090.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2013-1103.html	2023-11-07
http://rhn.redhat.com/errata/RHSA-2013-1137.html	2023-11-07
http://www.debian.org/security/2013/dsa-2738	2023-11-07
http://www.debian.org/security/2013/dsa-2809	2023-11-07
http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073	2023-11-07
http://www.ubuntu.com/usn/USN-1902-1	2023-11-07
https://bugzilla.redhat.com/show_bug.cgi?id=979251	2013-08-05
https://access.redhat.com/security/cve/CVE-2013-4073	2013-08-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.6-26 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.6-26"		-		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		-		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p160		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p17		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p173		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p174		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p22		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p248		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p249		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p299		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p301		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p302		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p330		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p334		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p352		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p357		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p358		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p370		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p371		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p373		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p71		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		p72		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		preview1		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		preview2		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		preview3		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.8.7 Search vendor "Ruby-lang" for product "Ruby" and version "1.8.7"		preview4		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		-		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p0		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p125		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p194		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p286		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p383		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p385		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p392		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p426		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				1.9.3 Search vendor "Ruby-lang" for product "Ruby" and version "1.9.3"		p429		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				2.0.0 Search vendor "Ruby-lang" for product "Ruby" and version "2.0.0"		p0		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				2.0.0 Search vendor "Ruby-lang" for product "Ruby" and version "2.0.0"		p195		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				2.0.0 Search vendor "Ruby-lang" for product "Ruby" and version "2.0.0"		preview1		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				2.0.0 Search vendor "Ruby-lang" for product "Ruby" and version "2.0.0"		preview2		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				2.0.0 Search vendor "Ruby-lang" for product "Ruby" and version "2.0.0"		rc1		Affected
Ruby-lang Search vendor "Ruby-lang"		Ruby Search vendor "Ruby-lang" for product "Ruby"				2.0.0 Search vendor "Ruby-lang" for product "Ruby" and version "2.0.0"		rc2		Affected