PT-2010-3685 · W3M+3 · W3M+3

Published 2010-06-16 · Updated 2024-06-15 · CVE-2010-2074

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions w3m version 0.5.2

Description The issue arises when ssl verify server is enabled and the software fails to properly handle a '0' character in a domain name within the subject's Common Name or the Subject Alternative Name field of an X.509 certificate. This allows for man-in-the-middle attacks, where attackers can spoof arbitrary SSL servers using a crafted certificate issued by a legitimate Certification Authority.

Recommendations For w3m version 0.5.2, consider disabling the ssl verify server option as a temporary workaround until a patch is available. Restrict access to SSL servers to minimize the risk of exploitation. Avoid using certificates with '0' characters in domain names until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2015-2043

CVE-2010-2074

OPENSUSE-SU-2024:10235-1

RHSA-2010:0565

RHSA-2010_0565

SUSE-SU-2016:3046-1

SUSE-SU-2016_3046-1

Affected Products

Alt Linux

Red Hat

Suse

W3M

References · 118

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38253 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4255 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38252 · Security Note
• http://vupen.com/english/advisories/2010/1467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2074 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0565.html · Vendor Advisory
• http://secunia.com/advisories/40134 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-2043 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00174 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:3046-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10235-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-2074 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044401.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2074 · Vendor Advisory