CVE-2013-4073
published 2013-08-18CVE-2013-4073: The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247…
PriorityP432medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
2.77%
85.3th percentile
The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | puppet | — | — |
| ruby-lang | ruby | — | — |
| ruby-lang | ruby | — | — |
| ruby-lang | ruby | — | — |
| ruby-lang | ruby | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_debian5.9LOW
vendor_redhat5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3gpq-xx45-4rr9: The OpenSSL::SSL
ghsa_unreviewed·2022-05-14·CVSS 5.9
CVE-2013-4073 [MEDIUM] GHSA-3gpq-xx45-4rr9: The OpenSSL::SSL
The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Ubuntu
Ruby vulnerability
vendor_ubuntu·2013-07-09
CVE-2013-4073 Ruby vulnerability
Title: Ruby vulnerability
Summary: An attacker could trick Ruby into trusting a rogue server.
William (B.J.) Snow Orvis discovered that Ruby incorrectly verified the
hostname in SSL certificates. An attacker could trick Ruby into trusting a
rogue server certificate, which was signed by a trusted certificate
authority, to perform a machine-in-the-middle attack.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
ruby: hostname check bypassing vulnerability in SSL client
vendor_redhat·2013-06-27·CVSS 5.9
CVE-2013-4073 [MEDIUM] ruby: hostname check bypassing vulnerability in SSL client
ruby: hostname check bypassing vulnerability in SSL client
The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Package: ruby (Red Hat Enterprise Linux 7) - Not affected
Package: jruby (Red Hat JBoss SOA Platform 4) - Will not fix
Package: jruby (Red Hat JBoss SOA Platform 5) - Will not fix
Package: ruby193-ruby (Red Hat Software Collections) - Affected
Package: ruby193-ruby (Red Hat Su
Debian
CVE-2013-4073: puppet - The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in R...
vendor_debian·2013·CVSS 5.9
CVE-2013-4073 [MEDIUM] CVE-2013-4073: puppet - The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in R...
The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Scope: local
bullseye: resolved
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-4248 php: hostname check bypassing vulnerability in SSL client
bugzilla·2013-08-14·CVSS 6.8
CVE-2013-4248 [MEDIUM] CVE-2013-4248 php: hostname check bypassing vulnerability in SSL client
CVE-2013-4248 php: hostname check bypassing vulnerability in SSL client
Similar to Ruby (CVE-2013-4073) and Python (CVE-2013-4238), PHP also suffers from how it checked the hostname's identity when handling certificates that contain hostnames with NULL bytes. An attacker could potentially exploit this flaw to conduct man-in-the-middle attacks to spoof SSL servers. Note that to exploit this issue, an attacker would need to obtain a carefully-crafted certificate signed by an authority that the client trusts.
This has been corrected in upstream git:
http://git.php.net/?p=php-src.git;a=commit;h=dcea4ec698dcae39b7bba6f6aa08933cbfee6755
http://git.php.net/?p=php-src.git;a=commit;h=2874696a5a8d46639d261571f915c493cd875897
While PHP referenced the Ruby CVE, one has not yet been assigned to PHP
Bugzilla
CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module
bugzilla·2013-08-13·CVSS 6.8
CVE-2013-4238 [MEDIUM] CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module
CVE-2013-4238 python: hostname check bypassing vulnerability in SSL module
A flaw was found in the way ssl.match_hostname() from the Python SSL module checked the hostname's identity when handling certificates that contain hostnames with NULL bytes. An attacker could potentially exploit this flaw to conduct man-in-the-middle attacks to spoof SSL servers. Note that to exploit this issue, an attacker would need to obtain a carefully-crafted certificate signed by an authority that the client trusts.
References:
http://bugs.python.org/issue18709
http://bugs.python.org/file31241/CVE-2013-4073_py34.patch
http://bugs.python.org/file31242/CVE-2013-4073_py33.patch
http://bugs.python.org/file31243/CVE-2013-4073_py27.patch
Discussion:
This flaw is similar to CVE-2013-4073, which affected Ruby: h
Bugzilla
ruby: CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client [fedora-all]
bugzilla·2013-06-28·CVSS 6.8
CVE-2013-4073 [MEDIUM] ruby: CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client [fedora-all]
ruby: CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note:
Bugzilla
CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client
bugzilla·2013-06-28·CVSS 6.8
CVE-2013-4073 [MEDIUM] CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client
CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client
Ruby’s SSL client implements hostname identity check but it does not properly handle hostnames in the certificate that contain null bytes.
OpenSSL::SSL.verify_certificate_identity implements RFC2818 Server Identity check for Ruby’s SSL client but it does not properly handle hostnames in the subjectAltName X509 extension that contain null bytes.
Existing code in lib/openssl/ssl.rb uses OpenSSL::X509::Extension#value for extracting identity from subjectAltName. Extension#value depends OpenSSL function X509V3_EXT_print() and for dNSName of subjectAltName it utilizes sprintf() that is known as null byte unsafe. As the result Extension#value returns ‘www.ruby-lang.org’ if the subjectAltName is ‘www.ruby-lang.org\0.examp
Bugzilla
jruby: CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client [fedora-all]
bugzilla·2013-06-28·CVSS 6.8
CVE-2013-4073 [MEDIUM] jruby: CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client [fedora-all]
jruby: CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note:
http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlhttp://lists.opensuse.org/opensuse-updates/2013-07/msg00042.htmlhttp://lists.opensuse.org/opensuse-updates/2013-07/msg00044.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1090.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1103.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1137.htmlhttp://support.apple.com/kb/HT6150http://www.debian.org/security/2013/dsa-2738http://www.debian.org/security/2013/dsa-2809http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/http://www.ubuntu.com/usn/USN-1902-1https://bugzilla.redhat.com/show_bug.cgi?id=979251https://puppet.com/security/cve/cve-2013-4073http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlhttp://lists.opensuse.org/opensuse-updates/2013-07/msg00042.htmlhttp://lists.opensuse.org/opensuse-updates/2013-07/msg00044.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1090.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1103.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1137.htmlhttp://support.apple.com/kb/HT6150http://www.debian.org/security/2013/dsa-2738http://www.debian.org/security/2013/dsa-2809http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/http://www.ubuntu.com/usn/USN-1902-1https://bugzilla.redhat.com/show_bug.cgi?id=979251https://puppet.com/security/cve/cve-2013-4073
2013-08-18
Published