CVE-2013-7440
EUVD-2013-720407.06.2016, 18:59
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| python | python | 𝑥 ≤ 2.7.8 |
| python | python | 3.0 |
| python | python | 3.0.1 |
| python | python | 3.1 |
| python | python | 3.1.1 |
| python | python | 3.1.2 |
| python | python | 3.1.3 |
| python | python | 3.1.4 |
| python | python | 3.1.5 |
| python | python | 3.1.2150 |
| python | python | 3.2 |
| python | python | 3.2:alpha |
| python | python | 3.2.0 |
| python | python | 3.2.1 |
| python | python | 3.2.2 |
| python | python | 3.2.3 |
| python | python | 3.2.4 |
| python | python | 3.2.5 |
| python | python | 3.2.6 |
| python | python | 3.2.2150 |
| python | python | 3.3 |
| python | python | 3.3:beta2 |
| python | python | 3.3.0 |
| python | python | 3.3.1 |
| python | python | 3.3.1:rc1 |
| python | python | 3.3.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References