CVE-2008-4989
published 2008-11-13CVE-2008-4989: The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate…
PriorityP424medium5.9CVSS 3.1
AVNACHPRNUINSUCNIHAN
EPSS
1.88%
77.1th percentile
The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| gnu | gnutls | < 2.6.1 | 2.6.1 |
| opensuse | opensuse | 10.3 – 11.1 | — |
| suse | linux_enterprise | — | — |
| suse | linux_enterprise | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat5.9MEDIUM
vendor_ubuntu5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GnuTLS vulnerabilities
vendor_ubuntu·2009-08-19·CVSS 5.9
CVE-2009-2730 [MEDIUM] GnuTLS vulnerabilities
Title: GnuTLS vulnerabilities
Summary: GnuTLS vulnerabilities
Moxie Marlinspike and Dan Kaminsky independently discovered that GnuTLS did
not properly handle certificates with NULL characters in the certificate
name. An attacker could exploit this to perform a machine-in-the-middle attack
to view sensitive information or alter encrypted communications.
(CVE-2009-2730)
Dan Kaminsky discovered GnuTLS would still accept certificates with MD2
hash signatures. As a result, an attacker could potentially create a
malicious trusted certificate to impersonate another site. This issue only
affected Ubuntu 6.06 LTS and Ubuntu 8.10. (CVE-2009-2409)
USN-678-1 fixed a vulnerability and USN-678-2 a regression in GnuTLS. The
upstream patches introduced a regression when validating certain certificate
Ubuntu
GnuTLS regression
vendor_ubuntu·2008-12-10·CVSS 5.9
[MEDIUM] GnuTLS regression
Title: GnuTLS regression
Summary: GnuTLS regression
USN-678-1 fixed a vulnerability in GnuTLS. The upstream patch introduced a
regression when validating certain certificate chains that would report valid
certificates as untrusted. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Martin von Gagern discovered that GnuTLS did not properly verify certificate
chains when the last certificate in the chain was self-signed. If a remote
attacker were able to perform a machine-in-the-middle attack, this flaw could be
exploited to view sensitive information. (CVE-2008-4989)
Instructions: In general, a standard system upgrade is sufficient to effect the
necessary changes.
Ubuntu
GnuTLS vulnerability
vendor_ubuntu·2008-11-26·CVSS 5.9
CVE-2008-4989 [MEDIUM] GnuTLS vulnerability
Title: GnuTLS vulnerability
Summary: GnuTLS vulnerability
Martin von Gagern discovered that GnuTLS did not properly verify certificate
chains when the last certificate in the chain was self-signed. If a remote
attacker were able to perform a machine-in-the-middle attack, this flaw could be
exploited to view sensitive information. (CVE-2008-4989)
Instructions: In general, a standard system upgrade is sufficient to effect the
necessary changes.
Red Hat
gnutls: certificate chain verification flaw
vendor_redhat·2008-11-10·CVSS 5.9
CVE-2008-4989 [MEDIUM] gnutls: certificate chain verification flaw
gnutls: certificate chain verification flaw
The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).
GHSA
GHSA-8ph9-x262-cchw: The _gnutls_x509_verify_certificate function in lib/x509/verify
ghsa_unreviewed·2022-05-14
CVE-2008-4989 [MEDIUM] CWE-295 GHSA-8ph9-x262-cchw: The _gnutls_x509_verify_certificate function in lib/x509/verify
The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).
No detection rules found.
No public exploits indexed.
CWE
Improper Following of a Certificate's Chain of Trust
mitre_cwe
CWE-296 Improper Following of a Certificate's Chain of Trust
CWE-296: Improper Following of a Certificate's Chain of Trust
The product does not follow, or incorrectly follows, the chain of trust for a certificate back to a trusted root certificate, resulting in incorrect trust of any resource that is associated with that certificate.
If a system does not follow the chain of trust of a certificate to a root server, the certificate loses all usefulness as a metric of trust. Essentially, the trust gained from a certificate is derived from a chain of trust -- with a reputable trusted entity at the end of that list. The end user must trust that reputable source, and this reputable source must vouch for the resource in question through the medium of the certificate. In some cases, this trust traverses several entities who vouch for one another. The enti
CWE
Improper Certificate Validation
mitre_cwe
CWE-295 Improper Certificate Validation
CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
Background: A certificate is a token that associates an identity (principal) to a cryptographic key. Certificates can be used to check if a public key belongs to the assumed owner.
Modes of Introduction:
Phase: Architecture and Design
Phase: Implementation
Note: REALIZATION: This weakness is caused during implementation of an architectural security tactic.
Phase: Implementation
Note: When the product uses certificate pinning, the developer might not properly validate all relevant components of the certificate before pinning the certificate. This can make it difficult or expensive to test after the pinning is complete.
Common Consequences:
Scope: Integrity, Authentication. Im
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlhttp://secunia.com/advisories/32619http://secunia.com/advisories/32681http://secunia.com/advisories/32687http://secunia.com/advisories/32879http://secunia.com/advisories/33501http://secunia.com/advisories/33694http://secunia.com/advisories/35423http://security.gentoo.org/glsa/glsa-200901-10.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1http://wiki.rpath.com/Advisories:rPSA-2008-0322http://www.debian.org/security/2009/dsa-1719http://www.gnu.org/software/gnutls/security.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:227http://www.redhat.com/support/errata/RHSA-2008-0982.htmlhttp://www.securityfocus.com/archive/1/498431/100/0/threadedhttp://www.securityfocus.com/bid/32232http://www.securitytracker.com/id?1021167http://www.ubuntu.com/usn/usn-678-2http://www.vupen.com/english/advisories/2008/3086http://www.vupen.com/english/advisories/2009/1567https://exchange.xforce.ibmcloud.com/vulnerabilities/46482https://issues.rpath.com/browse/RPL-2886https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650https://usn.ubuntu.com/678-1/https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.htmlhttp://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3215http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3217http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlhttp://secunia.com/advisories/32619http://secunia.com/advisories/32681http://secunia.com/advisories/32687http://secunia.com/advisories/32879http://secunia.com/advisories/33501http://secunia.com/advisories/33694http://secunia.com/advisories/35423http://security.gentoo.org/glsa/glsa-200901-10.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-260528-1http://wiki.rpath.com/Advisories:rPSA-2008-0322http://www.debian.org/security/2009/dsa-1719http://www.gnu.org/software/gnutls/security.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:227http://www.redhat.com/support/errata/RHSA-2008-0982.htmlhttp://www.securityfocus.com/archive/1/498431/100/0/threadedhttp://www.securityfocus.com/bid/32232http://www.securitytracker.com/id?1021167http://www.ubuntu.com/usn/usn-678-2http://www.vupen.com/english/advisories/2008/3086http://www.vupen.com/english/advisories/2009/1567https://exchange.xforce.ibmcloud.com/vulnerabilities/46482https://issues.rpath.com/browse/RPL-2886https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650https://usn.ubuntu.com/678-1/https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html
2008-11-13
Published