CVE-2013-0945 - EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate

Back Back to CVE browser

HIGH

EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate

Published May 3, 2013

9.3

HIGH

CVSS 2.0

EPSS 0.86%

Description

EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

http://archives.neohapsis.com/archives/bugtraq/2013-05/0014.html
mailing-listx_refsource_BUGTRAQ

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2013-05/0014.html		mailing-listx_refsource_BUGTRAQ

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published May 3, 2013

Updated Sep 17, 2024

Reserved Jan 9, 2013

Link CVE-2013-0945

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-0945

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-0945