[Forgot Password]
Login  Register Subscribe

23631

 
 

117687

 
 

98503

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-0738

Date: (C)2011-02-01   (M)2017-08-18 


MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate when executing (a) myproxy-logon or (b) myproxy-get-delegation.

CVSS Score: 4.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE





Reference:
SECUNIA-42972
SECUNIA-43103
BID-45916
OSVDB-70494
ADV-2011-0227
FEDORA-2011-0512
FEDORA-2011-0514
http://lists.globus.org/pipermail/security-announce/2011-January/000018.html
http://grid.ncsa.illinois.edu/myproxy/security/myproxy-adv-2011-01.txt
myproxy-ssl-spoofing(64830)

CWE    1
CWE-20

© 2013 SecPod Technologies