PYSEC-2013-36
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/freeipa/PYSEC-2013-36.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2013-36
- Aliases
-
- CVE-2012-5484
- Withdrawn
- 2024-11-22T04:37:04Z
- Published
- 2013-01-27T18:55:00Z
- Modified
- 2026-02-22T22:48:50.941977Z
- Summary
- [none]
- Details
-
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
- References
-
- http://www.freeipa.org/page/CVE-2012-5484
- http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=91f4af7e6af53e1c6bf17ed36cb2161863eddae4
- http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f
- http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9
- http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=31e41eea6c2322689826e6065ceba82551c565aa
- http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a40285c5a0288669b72f9d991508d4405885bffc
- http://www.freeipa.org/page/Releases/3.1.2
- http://rhn.redhat.com/errata/RHSA-2013-0188.html
- http://rhn.redhat.com/errata/RHSA-2013-0189.html
Affected packages
PyPI / freeipa
Package
- Name
- freeipa
- View open source insights on deps.dev
- Purl
- pkg:pypi/freeipa
Affected ranges
- Type
- GIT
- Repo
- https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed91f4af7e6af53e1c6bf17ed36cb2161863eddae4Fixed18eea90ebb24a9c22248f0b7e18646cc6e3e3e0fFixeda1991aeac19c3fec1fdd0d184c6760c90c9f9fc9Fixed31e41eea6c2322689826e6065ceba82551c565aaFixeda40285c5a0288669b72f9d991508d4405885bffc
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected