Ruby: Schwachstelle ermöglicht Man-in-the-Middle Angriff

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2013-4073

  The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1…

  Aug 18, 2013

Revision history

1. 2025-04-22 #14

   Neue Updates von Oracle Linux aufgenommen

2. 2013-12-04 #13

   New remediations available

3. 2013-09-24 #12

   New remediations available

4. 2013-08-19 #11

   New remediations available

5. 2013-08-06 #10

   New remediations available

6. 2013-08-05 #9

   New remediations available

7. 2013-07-30 #8

   New remediations available

8. 2013-07-28 #7

   New remediations available

9. 2013-07-23 #6

   New remediations available

10. 2013-07-17 #4

    New remediations available

11. 2013-07-17 #5

    Version nicht vorhanden

12. 2013-07-09 #3

    New remediations available

13. 2013-06-27 #1

    Initial Release

14. 2013-06-27 #2

    Version nicht vorhanden

References

• Ruby News "Hostname check bypassing vulnerability in SSL client (CVE-2013-4073)" vom 2013-06-27
  http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/
• Ubuntu Security Notice USN-1902-1 vom 2013-07-09
  http://www.ubuntu.com/usn/usn-1902-1/
• Red Hat Security Advisory RHSA-2013:1090-1 vom 2013-07-17
  http://rhn.redhat.com/errata/RHSA-2013-1090.html
• Red Hat Security Advisory RHSA-2013:1103-1 vom 2013-07-23
  http://rhn.redhat.com/errata/RHSA-2013-1103.html
• SUSE Security Update SUSE-SU-2013:1260-1 vom 2013-07-26
  https://www.suse.com/support/update/announcement/2013/suse-su-20131260-1.html
• SUSE Security Update SUSE-SU-2013:1260-2 vom 2013-07-30
  https://www.suse.com/support/update/announcement/2013/suse-su-20131260-2.html
• Red Hat Security Advisory RHSA-2013:1137-1 vom 2013-08-05
  http://rhn.redhat.com/errata/RHSA-2013-1137.html
• SUSE Security Update SUSE-SU-2013:1260-3 vom 2013-08-06
  https://www.suse.com/support/update/announcement/2013/suse-su-20131260-3.html
• Debian Security Advisory DSA-2738-1 vom 2013-08-19
  http://www.debian.org/security/2013/dsa-2738
• ORACLE Third Party Vulnerability Resolution Blog vom 2013-09-24
  https://blogs.oracle.com/sunsecurity/entry/cve_2013_4073_cryptographic_issues
• Debian Security Advisory DSA-2809-1 vom 2013-12-04
  http://www.debian.org/security/2013/dsa-2809
• Oracle Linux Security Advisory ELSA-2025-4063 vom 2025-04-22
  https://linux.oracle.com/errata/ELSA-2025-4063.html