CVE-2013-4314

pyOpenSSL < 0.13.1 - Certificate Subject Alternative Name Spoofing via Null Byte

Title source: llm
STIX 2.1

Description

The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

References (6)

Core 6
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2763
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1005325
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-11/msg00015.html
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/09/06/2
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1965-1

Scores

EPSS 0.0120
EPSS Percentile 64.5%

Details

CWE
CWE-20
Status published
Products (12)
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 12.10
canonical/ubuntu_linux 13.04
jean-paul_calderone/pyopenssl 0.7
jean-paul_calderone/pyopenssl 0.8 a1
jean-paul_calderone/pyopenssl 0.9
jean-paul_calderone/pyopenssl 0.10
jean-paul_calderone/pyopenssl 0.11 (3 CPE variants)
jean-paul_calderone/pyopenssl 0.12
... and 2 more
Published Sep 30, 2013
Tracked Since Feb 18, 2026