ISOMAN

CVE

CVE-2014-3522

The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

Severity
MEDIUM
CVSS
4
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html
  2. http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html
  3. http://secunia.com/advisories/59432
  4. http://secunia.com/advisories/59584
  5. http://secunia.com/advisories/60100
  6. http://secunia.com/advisories/60722
  7. http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
  8. http://www.osvdb.org/109996
  9. http://www.securityfocus.com/bid/69237
  10. http://www.ubuntu.com/usn/USN-2316-1
  11. https://exchange.xforce.ibmcloud.com/vulnerabilities/95090
  12. https://exchange.xforce.ibmcloud.com/vulnerabilities/95311
  13. https://security.gentoo.org/glsa/201610-05
  14. https://subversion.apache.org/security/CVE-2014-3522-advisory.txt
  15. https://support.apple.com/HT204427
  16. http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html
  17. http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html
  18. http://secunia.com/advisories/59432
  19. http://secunia.com/advisories/59584
  20. http://secunia.com/advisories/60100