vulnwire
5.9med

CVE-2008-4989

The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which th…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
5.9
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.9%
percentile 80%
Public exploits
0
none known

The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).

Exploit prediction (EPSS)

1.88% probability of exploitation in the next 30 days, higher than 80% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.15.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-295 Improper Certificate Validation

References

  • mandriva.com /security/advisories?name=MDVSA-2008:227 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • ubuntu.com /usn/usn-678-2 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • secunia.com /advisories/33694 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.gentoo.org /glsa/glsa-200901-10.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • redhat.com /support/errata/RHSA-2008-0982.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • usn.ubuntu.com /678-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • securityfocus.com /archive/1/498431/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • article.gmane.org /gmane.comp.encryption.gpg.gnutls.devel/3215 · mailing-list, x_refsource_MLIST, x_transferred
  • article.gmane.org /gmane.comp.encryption.gpg.gnutls.devel/3217 · mailing-list, x_refsource_MLIST, x_transferred
  • wiki.rpath.com /Advisories:rPSA-2008-0322 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/32687 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /archives/fedora-package-announce/2008-November/msg00293.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • gnu.org /software/gnutls/security.html · x_refsource_CONFIRM, x_transferred
  • issues.rpath.com /browse/RPL-2886 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/35423 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-12/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securityfocus.com /bid/32232 · vdb-entry, x_refsource_BID, x_transferred
  • securitytracker.com /id?1021167 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-260528-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/33501 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32879 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2009/1567 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/32619 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/3086 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/32681 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-04/msg00010.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11650 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • debian.org /security/2009/dsa-1719 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • redhat.com /archives/fedora-package-announce/2008-November/msg00222.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/46482 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.