cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

Bugtraq ID:	63776
Class:	Design Error
CVE:	CVE-2013-4545
Remote:	Yes
Local:	No
Published:	Nov 11 2013 12:00AM
Updated:	May 15 2015 12:14AM
Credit:	Scott Cantor
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 LTS Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Oracle Glassfish Server 3.0.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Daniel Stenberg curl 7.20 Daniel Stenberg curl 7.19.6 Daniel Stenberg curl 7.19.5 Daniel Stenberg curl 7.19.4 Daniel Stenberg curl 7.19.3 Daniel Stenberg curl 7.19 Daniel Stenberg curl 7.18.1 Daniel Stenberg curl 7.18 Daniel Stenberg curl 7.24.0 Daniel Stenberg curl 7.23.1 Daniel Stenberg curl 7.21.7 Daniel Stenberg curl 7.21.6 Daniel Stenberg curl 7.20.2 Daniel Stenberg curl 7.20.1
Not Vulnerable:

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

cURL/libcURL is prone to a security-bypass vulnerability because it fails to properly validate SSL certificates.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

cURL 7.18.0 through 7.32.0 are vulnerable.

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

An attacker can use readily available network utilities to exploit this issue.

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

References: