PT-2012-6101 · Paypal · Paypal Payments Standard Php Library

Publicado 2012-11-04 · Atualizado 2017-08-29 · CVE-2012-5789

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PayPal Payments Standard PHP Library versions before 20120427

Description The issue is related to the intentional disabling of certificate-validation checks, allowing man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. This is because the library does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate.

Recommendations For versions before 20120427, update to version 20120427 or later to resolve the issue. As a temporary workaround, consider enabling certificate-validation checks to prevent man-in-the-middle attacks.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-5789

Produtos afetados

Paypal Payments Standard Php Library

Referências · 3

• 🔥 http://cs.utexas.edu/~shmat/shmat_ccs12.pdf · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79912 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5789 · Nota de Segurança