Oval Definition:oval:com.ubuntu.precise:def:20143522000
Revision Date:2014-08-19Version:1
Title:CVE-2014-3522 on Ubuntu 12.04 LTS (precise) - medium.
Description:The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-3522
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'subversion' package in precise was vulnerable but has been fixed (note: '1.6.17dfsg-3ubuntu3.4').
    • BACK