Oval Definition:	oval:org.mitre.oval:def:26428
Revision Date: 2014-12-15 Version: 20 Title: HP-UX Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Service (DoS) and Other Vulnerabilities Description: The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-4248 Platform(s): HP-UX 11 Product(s): Definition Synopsis HP-UX B.11.23 AND filesets test hpuxws22APCH32.APACHE version is less than B.2.2.15.21 OR hpuxws22APCH32.APACHE2 version is less than B.2.2.15.21 OR hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.21 OR hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.21 OR hpuxws22APCH32.MOD_JK version is less than B.2.2.15.21 OR hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.21 OR hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.21 OR hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.21 OR hpuxws22APCH32.PHP version is less than B.2.2.15.21 OR hpuxws22APCH32.PHP2 version is less than B.2.2.15.21 OR hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.21 OR hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.21 OR hpuxws22APACHE.APACHE version is less than B.2.2.15.21 OR hpuxws22APACHE.APACHE2 version is less than B.2.2.15.21 OR hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.21 OR hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.21 OR hpuxws22APACHE.MOD_JK version is less than B.2.2.15.21 OR hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.21 OR hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.21 OR hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.21 OR hpuxws22APACHE.PHP version is less than B.2.2.15.21 OR hpuxws22APACHE.PHP2 version is less than B.2.2.15.21 OR hpuxws22APACHE.WEBPROXY version is less than B.2.2.15.21 OR hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.15.21 OR hpuxws22TOMCAT.TOMCAT version is less than B.2.2.15.21
BACK