Oval Definition:oval:org.mitre.oval:def:28794
Revision Date:2015-08-17Version:4
Title:DSA-2798-2 -- curl -- unchecked ssl certificate host name
Description:Scott Cantor discovered that curl, a file retrieval tool, would disable the CURLOPT_SSLVERIFYHOST check when the CURLOPT_SSL_VERIFYPEER setting was disabled. This would also disable ssl certificate host name checks when it should have only disabled verification of the certificate trust chain.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2013-4545
DSA-2798-2
Platform(s):Debian GNU/kFreeBSD 6.0
Debian GNU/kFreeBSD 7.0
Debian GNU/Linux 6.0
Debian GNU/Linux 7.0
Product(s):curl
Definition Synopsis
  • Debian 6
  • Debian 6.0 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND curl is earlier than 0:7.21.0-2.1+squeeze5
  • OR Debian 7
  • Debian 7 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND curl is earlier than 0:7.26.0-1+wheezy5
  • BACK