Oval Definition:oval:org.mitre.oval:def:19943
Revision Date:2014-06-23Version:7
Title:DSA-2798-1 curl - unchecked ssl certificate host name
Description:Scott Cantor discovered that curl, a file retrieval tool, would disable the CURLOPT_SSLVERIFYHOST check when the CURLOPT_SSL_VERIFYPEER setting was disabled. This would also disable ssl certificate host name checks when it should have only disabled verification of the certificate trust chain.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2013-4545
DSA-2798-1
Platform(s):Debian GNU/kFreeBSD 6.0
Debian GNU/kFreeBSD 7
Debian GNU/Linux 6.0
Debian GNU/Linux 7
Product(s):curl
Definition Synopsis
  • Release section
  • Debian 6.0 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND curl DPKG is earlier than 0:7.21.0-2.1+squeeze5
  • Release section
  • Debian 7 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND curl DPKG is earlier than 0:7.26.0-1+wheezy5
  • BACK