CVE-2013-1014

{"id": "CVE-2013-1014", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-05-20T14:44:35.207", "references": [{"url": "http://lists.apple.com/archives/security-announce/2013/May/msg00000.html", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT5766", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17605", "source": "product-security@apple.com"}, {"url": "http://lists.apple.com/archives/security-announce/2013/May/msg00000.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.apple.com/kb/HT5766", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17605", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate."}, {"lang": "es", "value": "Apple iTunes anterior a 11.0.3 no verifica adecuadamente los certificados X.509, lo que permite a atacantes man-in-the-middle suplantar los servidores HTTPS a trav\u00e9s de un certificado arbitrario v\u00e1lido."}], "lastModified": "2024-11-21T01:48:44.417", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D253112B-009C-45DA-8354-E9154B42F35F", "versionEndIncluding": "11.0.2"}, {"criteria": "cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CBD58D1-C40D-4F6D-816F-A3842897EB05"}, {"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666"}, {"criteria": "cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0415D4B8-0281-4ED5-B3A1-A97BDD0F8D36"}, {"criteria": "cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1B4195D-1550-42D1-B562-0E438F7ACC2E"}, {"criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106"}, {"criteria": "cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1206A192-A22C-4C55-A323-1D28D89BED21"}, {"criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81"}, {"criteria": "cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52E156DE-12B4-4E7A-B8C4-C2FC0AC2B2C9"}, {"criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"}, {"criteria": "cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93748DFC-6003-4BED-87F9-98713F6897EE"}, {"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"}, {"criteria": "cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A8873F1-4792-41A1-83B5-B85C9F4A7D56"}, {"criteria": "cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB84AFE4-2694-475A-80D3-4D50C524EE18"}, {"criteria": "cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB20AA2E-5DF0-420C-A1FE-BB6EBA9649FE"}, {"criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"}, {"criteria": "cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8343D87F-FA37-4225-B27D-BCCDD2433C31"}, {"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232"}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34B5892B-0377-4D81-9E0E-94B8D8CE72C3"}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A"}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75"}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"}, {"criteria": "cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "582D1FE8-C4E8-4385-B4EB-34320F019E43"}, {"criteria": "cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF61CE34-5130-4B1A-B7A2-B28C1A18B9BA"}, {"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"}, {"criteria": "cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2223B8E2-346A-4C37-9F6C-879F9CA64C06"}, {"criteria": "cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93E5227C-0621-43EE-A0F2-4B4545D71852"}, {"criteria": "cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB69B123-7A09-4855-9846-E8ACACB3C6F6"}, {"criteria": "cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0CC53F2-3827-4CA3-8726-C481B57B4AB2"}, {"criteria": "cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C1AFF8F-BBCA-4C93-A401-F8B478327BFE"}, {"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BA3571F-9221-45CD-9798-CC72CA428D6A"}, {"criteria": "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "129ABCA4-FBF6-41B8-BF6B-65467D56D297"}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "017E5A35-D778-46FD-A536-E57A13162675"}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6122C685-4F02-476F-9A41-9C62D3D92651"}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17D37426-00A0-40E5-A27A-CF31D8CBAEEF"}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E11CADC-AFCC-4A98-9271-C35BC9752B40"}, {"criteria": "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11F1530E-9E63-4A39-9056-3A946A34B650"}, {"criteria": "cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3856A348-A0D6-4A0A-A8C9-D369CC863A97"}, {"criteria": "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29E92D8D-68AB-4FC4-A37A-D6D48829B58D"}, {"criteria": "cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "670656BF-2BE2-41ED-854A-466DC4068FBF"}, {"criteria": "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDE7F79F-54F5-4315-98BD-414CA2D1C51E"}, {"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBBF2E9F-0F37-4DDA-9704-B31D94745257"}, {"criteria": "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"}, {"criteria": "cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1143A4DE-F75B-4396-9D01-CE14EF8FCB39"}, {"criteria": "cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDF87AB4-B3F3-4774-8CE3-A2B46C3D8DC5"}, {"criteria": "cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A02D076B-5900-401D-9B47-5136B9CEAA15"}, {"criteria": "cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E479501-8832-41B0-A63C-360AE5A1B420"}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E41B2E2A-CE22-49FD-9558-0E6C87F53425"}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1950796-DA96-4443-85F4-91FE38A26612"}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5EBED9A-DCF4-47FE-9A6D-4573594AA645"}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F7EA3F3-576C-4661-B35F-EC34CE363125"}, {"criteria": "cpe:2.3:a:apple:itunes:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6775CF5C-2083-4622-9D9B-DF7AB4F07422"}, {"criteria": "cpe:2.3:a:apple:itunes:9.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C84CFAD-5D0F-4BBE-A603-D7A2E8BFB28F"}, {"criteria": "cpe:2.3:a:apple:itunes:9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C3A6055-2626-4A6E-9596-9974E7437FB5"}, {"criteria": "cpe:2.3:a:apple:itunes:9.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00AF4F28-A71C-4CB3-8F5F-C15500332954"}, {"criteria": "cpe:2.3:a:apple:itunes:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5817849-ADD0-4905-87D5-4D61DB635747"}, {"criteria": "cpe:2.3:a:apple:itunes:10.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96E90253-3F7D-4361-819B-5D49657F4472"}, {"criteria": "cpe:2.3:a:apple:itunes:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84336EBA-5EC0-4C49-B1B9-9DAB23D5C3C2"}, {"criteria": "cpe:2.3:a:apple:itunes:10.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CDE68E5-744B-4E18-BB74-83D7185E6A57"}, {"criteria": "cpe:2.3:a:apple:itunes:10.1.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A599C14-8294-40D2-BCF2-183AF3D3AD84"}, {"criteria": "cpe:2.3:a:apple:itunes:10.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2375C00-64ED-4027-810F-BA9E561385D3"}, {"criteria": "cpe:2.3:a:apple:itunes:10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C720899-5ED4-4B7F-B90F-043DE7D91C44"}, {"criteria": "cpe:2.3:a:apple:itunes:10.2.2.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81A2EB90-E0C6-47B0-91BD-F77A721C163F"}, {"criteria": "cpe:2.3:a:apple:itunes:10.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1CA3CEB-11D9-4B24-82A1-D7EE77C2E7B4"}, {"criteria": "cpe:2.3:a:apple:itunes:10.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FF65883-4445-4436-98C5-35D9D2E1907B"}, {"criteria": "cpe:2.3:a:apple:itunes:10.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0CCD602-FC35-4FD5-B976-4B585C5AA254"}, {"criteria": "cpe:2.3:a:apple:itunes:10.4.0.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D82F9D18-690C-4F81-A940-C509C5AC8D30"}, {"criteria": "cpe:2.3:a:apple:itunes:10.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00B09F07-11C7-4A0A-9367-3A12E9B21110"}, {"criteria": "cpe:2.3:a:apple:itunes:10.4.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87884DFE-9254-4CF3-A002-16DB880AA0DE"}, {"criteria": "cpe:2.3:a:apple:itunes:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78B3119A-8986-4F13-9156-F8C9D1D8BC06"}, {"criteria": "cpe:2.3:a:apple:itunes:10.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCA7E822-3EEC-4BF1-93A3-3E474BB4651A"}, {"criteria": "cpe:2.3:a:apple:itunes:10.5.1.42:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AC29E4A-A3C2-4D8A-B7AF-823A31EEEFF9"}, {"criteria": "cpe:2.3:a:apple:itunes:10.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6AACF2A-2CF0-4631-A979-B226D063275E"}, {"criteria": "cpe:2.3:a:apple:itunes:10.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8020420-4C59-4536-9F73-AEC7999F766B"}, {"criteria": "cpe:2.3:a:apple:itunes:10.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3822ACC2-5FEC-4F97-A5B2-8FE9D8EFC860"}, {"criteria": "cpe:2.3:a:apple:itunes:10.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DE4341F-4022-4BD2-B1B5-EE2DDDF2A600"}, {"criteria": "cpe:2.3:a:apple:itunes:10.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54EE7E9B-DA2A-42F4-83D9-7E59B2DE7747"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E9D96EC5-8FFC-4C8D-9C3E-EFEE79D4D52C"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8961F444-48C4-4B54-829B-A1A2D0F2716C"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.1:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "09A0FA11-6211-4962-A6E0-F00732818012"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.2:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A36C17C-EBB3-4C42-9C75-6A7F2EE1F22C"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.3:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A82DEF28-B061-44B3-AF9B-BE529DB457D9"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.4:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FFAECA7C-9A9F-4F5D-8E57-7334C34D24F7"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.5:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0D318511-0594-4EE0-BA09-1FA110CFDD17"}, {"criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"}, {"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B47EBFCC-1828-45AB-BC6D-FB980929A81A"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "product-security@apple.com"}