The IBM WebSphere Application Server running on the remote host is version 7.0.0.x through 7.0.0.45, 8.0.0.x through 8.0.0.15, 8.5.0.x prior to 8.5.5.14 or 9.0.x prior to 9.0.0.8. It is, therefore, affected by an information disclosure vulnerability in the Apache Commons HttpClient subcomponent due to the failure to  verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate. An unauthenticated, remote attacker can exploit this to conduct spoofing attacks, by persuading a victim to visit a web site containing a specially-crafted certificate.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

jakarta-commons-httpclient3 was updated to enhance the fix of bnc#803332 / CVE-2012-5783 :

  - also add a check for subjectAltNames in certificates

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the de3f0385-7c37-11f1-8dc2-dca632daf43b advisory.

    MITRE reports:
    Apache Commons HttpClient 3.x, as used in ..., does not verify that the server hostname matches a domain     name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-     in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44994. It is, therefore, affected by a vulnerability as referenced in the IJ44994 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update fixes a security vulnerability that caused jakarta-commons-httpclient not to verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid certificate (CVE-2012-5783).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2769-1 advisory.

    It was discovered that Apache Commons HttpClient did not properly verify the Common Name or subjectAltName     fields of X.509 certificates. An attacker could exploit this to perform a machine-in-the-middle attack to     view sensitive information or alter encrypted communications. This issue only affected Ubuntu 12.04 LTS.
    (CVE-2012-5783)

    Florian Weimer discovered the fix for CVE-2012-5783 was incomplete for Apache Commons HttpClient. An     attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or     alter encrypted communications. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-6153)

    Subodh Iyengar and Will Shackleton discovered the fix for CVE-2012-5783 was incomplete for Apache Commons     HttpClient. An attacker could exploit this to perform a machine-in-the-middle attack to view sensitive     information or alter encrypted communications. (CVE-2014-3577)

    It was discovered that Apache Commons HttpClient did not properly handle read timeouts during HTTPS     handshakes. A remote attacker could trigger this flaw to cause a denial of service. (CVE-2015-5262)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Jakarta Commons HttpClient component did not verify that the server hostname matched the domain name in the subject's Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the- middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. (CVE-2012-5783)

Applications using the Jakarta Commons HttpClient component must be restarted for this update to take effect.

Security fix for CVE-2014-3577, CVE-2012-6153

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.

It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject's Common Name (CN) field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
141917	IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.14 / 9.0.x < 9.0.0.8 Information Disclosure (CVE-2012-5783)	Nessus	Web Servers	2020/10/27	2024/10/23	medium
74961	openSUSE Security Update : jakarta-commons-httpclient3 (openSUSE-SU-2013:0623-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
326310	FreeBSD : httpclient -- Improper Certificate Validation (de3f0385-7c37-11f1-8dc2-dca632daf43b)	Nessus	FreeBSD Local Security Checks	2026/7/10	2026/7/10	low
174444	AIX (IJ44994)	Nessus	AIX Local Security Checks	2023/4/18	2026/10/16	low
64402	Fedora 17 : jakarta-commons-httpclient-3.1-12.fc17 (2013-1189)	Nessus	Fedora Local Security Checks	2013/2/4	2021/1/11	medium
86401	Ubuntu 14.04 LTS : Apache Commons HttpClient vulnerabilities (USN-2769-1)	Nessus	Ubuntu Local Security Checks	2015/10/15	2025/9/3	medium
64778	Scientific Linux Security Update : jakarta-commons-httpclient on SL5.x, SL6.x i386/x86_64 (20130219)	Nessus	Scientific Linux Local Security Checks	2013/2/21	2021/1/14	medium
77396	Fedora 19 : jakarta-commons-httpclient-3.1-15.fc19 (2014-9539)	Nessus	Fedora Local Security Checks	2014/8/27	2021/1/11	medium
78353	Amazon Linux AMI : jakarta-commons-httpclient (ALAS-2014-410)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2018/4/18	medium

检测

插件搜索

medium

medium

low

low

medium

medium

medium

medium

medium