CVE-2013-2770 - The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate

Back Back to CVE browser

MEDIUM

The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate

Published Apr 7, 2013

5.8

MEDIUM

CVSS 2.0

EPSS 0.59%

Description

The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

http://www.novell.com/support/kb/doc.php?id=7011965
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.novell.com/support/kb/doc.php?id=7011965		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 7, 2013

Updated Sep 17, 2024

Reserved Apr 7, 2013

Link CVE-2013-2770

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-2770

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-2770