cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

Bugtraq ID:	64431
Class:	Design Error
CVE:	CVE-2013-6422
Remote:	Yes
Local:	No
Published:	Dec 17 2013 12:00AM
Updated:	Oct 06 2014 01:00AM
Credit:	Marc Deslauriers
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Daniel Stenberg curl 7.24.0 Daniel Stenberg curl 7.23.1 Daniel Stenberg curl 7.21.7 Daniel Stenberg curl 7.21.6
Not Vulnerable:

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

cURL/libcURL is prone to a security-bypass vulnerability because it fails to properly validate SSL certificates.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

cURL 7.21.4 through 7.33.0 are vulnerable.

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

An attacker can use readily available network utilities to exploit this issue.

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

cURL/libcURL SSL Certificate Host Name Validation Security Bypass Vulnerability

References: