PT-2012-6101 · Paypal · Paypal Payments Standard Php Library

Published 2012-11-04 · Updated 2017-08-29 · CVE-2012-5789

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PayPal Payments Standard PHP Library versions before 20120427

Description The issue is related to the intentional disabling of certificate-validation checks, allowing man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. This is because the library does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate.

Recommendations For versions before 20120427, update to version 20120427 or later to resolve the issue. As a temporary workaround, consider enabling certificate-validation checks to prevent man-in-the-middle attacks.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-5789

Affected Products

Paypal Payments Standard Php Library

References · 3

• 🔥 http://cs.utexas.edu/~shmat/shmat_ccs12.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-5789 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79912 · Note