The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0270 advisory.

    The Jakarta Commons HttpClient component can be used to build HTTP-aware     client applications (such as web browsers and web service clients).

    The Jakarta Commons HttpClient component did not verify that the server     hostname matched the domain name in the subject's Common Name (CN) or     subjectAltName field in X.509 certificates. This could allow a     man-in-the-middle attacker to spoof an SSL server if they had a certificate     that was valid for any domain name. (CVE-2012-5783)

    All users of jakarta-commons-httpclient are advised to upgrade to these     updated packages, which correct this issue. Applications using the Jakarta     Commons HttpClient component must be restarted for this update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

jakarta-commons-httpclient3 was updated to add SSL certificate hostname checking. (CVE-2012-5783)

Security fix for CVE-2014-3577, CVE-2012-6153

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated redhat-support-plugin-rhev package that fixes one security issue is now available.

The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The Red Hat Support plug-in for Red Hat Enterprise Virtualization is a new feature which offers seamless integrated access to Red Hat Access services from the Red Hat Enterprise Virtualization Administration Portal. The plug-in provides automated functionality that enables quicker help, answers, and proactive services. It offers easy and instant access to Red Hat exclusive knowledge, resources, engagement, and diagnostic features.

Detailed information about this plug-in can be found in the Red Hat Customer Portal at https://access.redhat.com/site/articles/425603

The Jakarta Commons HttpClient component did not verify that the server hostname matched the domain name in the subject's Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. (CVE-2012-5783)

All users of the Red Hat Support plug-in on Red Hat Enterprise Virtualization Manager are advised to install this updated package, which fixes this issue.

CVE-2012-5783 and CVE-2012-6153 Apache Commons HttpClient 3.1 did not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Thanks to Alberto Fernandez Martinez for the patch.

CVE-2014-3577 It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate. The fix for CVE-2012-6153 was intended to address the incomplete patch for CVE-2012-5783. The issue is now completely resolved by applying this patch and the one for the previous CVEs

This upload was prepared by Markus Koschany.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The IBM WebSphere Application Server running on the remote host is version 7.0.0.x through 7.0.0.45, 8.0.0.x through 8.0.0.15, 8.5.0.x prior to 8.5.5.14 or 9.0.x prior to 9.0.0.8. It is, therefore, affected by an information disclosure vulnerability in the Apache Commons HttpClient subcomponent due to the failure to  verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate. An unauthenticated, remote attacker can exploit this to conduct spoofing attacks, by persuading a victim to visit a web site containing a specially-crafted certificate.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44987. It is, therefore, affected by a vulnerability as referenced in the IJ44987 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45224. It is, therefore, affected by a vulnerability as referenced in the IJ45224 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

jakarta-commons-httpclient3 was updated to enhance the fix of bnc#803332 / CVE-2012-5783 :

  - also add a check for subjectAltNames in certificates

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
64695	RHEL 5 / 6 : jakarta-commons-httpclient (RHSA-2013:0270)	Nessus	Red Hat Local Security Checks	2013/2/20	2024/11/4	low
74904	openSUSE Security Update : jakarta-commons-httpclient3 (openSUSE-SU-2013:0354-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
77399	Fedora 20 : jakarta-commons-httpclient-3.1-15.fc20 (2014-9581)	Nessus	Fedora Local Security Checks	2014/8/27	2021/1/11	medium
78999	RHEL 6 : redhat-support-plugin-rhev (RHSA-2014:0224)	Nessus	Red Hat Local Security Checks	2014/11/8	2021/1/14	medium
83545	Debian DLA-222-1 : commons-httpclient security update	Nessus	Debian Local Security Checks	2015/5/20	2021/1/11	medium
141917	IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.14 / 9.0.x < 9.0.0.8 Information Disclosure (CVE-2012-5783)	Nessus	Web Servers	2020/10/27	2024/10/23	medium
174439	AIX (IJ44987)	Nessus	AIX Local Security Checks	2023/4/18	2024/10/23	low
174446	AIX (IJ45224)	Nessus	AIX Local Security Checks	2023/4/18	2024/10/23	low
74961	openSUSE Security Update : jakarta-commons-httpclient3 (openSUSE-SU-2013:0623-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium

检测

插件搜索

low

medium

medium

medium

medium

medium

low

low

medium