« List of all CVEs

CVE-2013-0308

Published: 3/8/2013 Last updated: 8/6/2024 Reserved: 12/6/2012

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

conf-git

Products affected (1)

Product Vendor Version
n/a n/a < 10.0.17763.3046

References (34)