PT-2010-5155 · Openconnect · Openconnect

Jan Lieskovsky · Publicado 2010-10-12 · Atualizado 2010-10-14 · CVE-2010-3901

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenConnect versions prior to 2.25

Description The issue allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers by presenting a crafted server certificate. This can happen in two scenarios: (1) when the certificate does not correspond to the server hostname, or (2) when the --cafile configuration option is missing.

Recommendations For versions prior to 2.25, update to version 2.25 or later to resolve the issue. As a temporary workaround, consider configuring the --cafile option to specify a trusted certificate authority file, and ensure that server certificates are properly validated against the server hostname.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-3901

Produtos afetados

Openconnect

Referências · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2010-3901 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2010-3901 · Aviso do Fabricante
• http://infradead.org/openconnect.html · Nota
• http://openwall.com/lists/oss-security/2010/08/02/7 · Nota
• https://osv.dev/vulnerability/CVE-2010-3901 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/08/01/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3901 · Nota de Segurança