PT-2014-2803 · Gnu+2 · Libgadu+2

Ratul Gupta · Publicado 2014-07-31 · Atualizado 2023-02-13 · CVE-2013-4488

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions libgadu versions prior to 1.12.0

Description The issue allows man-in-the-middle attackers to spoof servers by not verifying X.509 certificates from SSL servers.

Recommendations For versions prior to 1.12.0, update to version 1.12.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

ALT-PU-2014-1968

CVE-2013-4488

MGASA-2014-0375

Produtos afetados

Alt Linux

Debian

Libgadu

Referências · 26

• http://mail-archive.com/[e-mail]/msg01017.html · Nota
• https://security.gentoo.org/glsa/201508-02 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-4488 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4488 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-4488 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2013-4488 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2013-4488 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0375.html · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/10/31/5 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2013-December/125143.html · Aviso do Fabricante
• https://packages.debian.org/src:libgadu · Nota
• https://errata.altlinux.org/ALT-PU-2014-1968 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=12158 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-4488 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/10/31 · Nota