Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.
References
| Link | Resource |
|---|---|
| http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf | Exploit |
| http://www.mandriva.com/security/advisories?name=MDVSA-2013:101 | Broken Link |
| http://www.ubuntu.com/usn/USN-1642-1 | Third Party Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/79930 | Third Party Advisory VDB Entry |
| https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 | Third Party Advisory |
| http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf | Exploit |
| http://www.mandriva.com/security/advisories?name=MDVSA-2013:101 | Broken Link |
| http://www.ubuntu.com/usn/USN-1642-1 | Third Party Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/79930 | Third Party Advisory VDB Entry |
| https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 | Third Party Advisory |
Configurations
History
21 Nov 2024, 01:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - Exploit | |
| References | () http://www.mandriva.com/security/advisories?name=MDVSA-2013:101 - Broken Link | |
| References | () http://www.ubuntu.com/usn/USN-1642-1 - Third Party Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/79930 - Third Party Advisory, VDB Entry | |
| References | () https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 - Third Party Advisory |
09 Feb 2024, 03:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.8
v3 : 5.9 |
| First Time |
Canonical
Canonical ubuntu Linux |
|
| CPE | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:* |
|
| CWE | CWE-295 | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/79930 - Third Party Advisory, VDB Entry | |
| References | (CONFIRM) https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 - Third Party Advisory | |
| References | (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2013:101 - Broken Link | |
| References | (UBUNTU) http://www.ubuntu.com/usn/USN-1642-1 - Third Party Advisory |
Information
Published : 2012-11-04 22:55
Updated : 2024-11-21 01:45
NVD link : CVE-2012-5821
Mitre link : CVE-2012-5821
CVE.ORG link : CVE-2012-5821
JSON object : View
Products Affected
canonical
- ubuntu_linux
lynx
- lynx
CWE
CWE-295
Improper Certificate Validation