Man-in-the-Middle (MitM) attack in PHP - CVE-2013-4248

Vulnerability identifier: #VU16074

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-4248

CWE-ID: CWE-300

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to conduct MITM-attack on the target system.

The weakness exists due to the openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '' character in a domain name in the Subject Alternative Name field of an X.509 certificate. A remote attacker can use man-in-the-middle technique and spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

PHP

Gentoo Linux
SUSE Linux
Slackware Linux
php5 (Ubuntu package)
php (Alpine package)
dev-lang/php
HP-UX Web Server Suite

Install updates from vendor's website.

PHP - addressed in versions 5.4.18, 5.5.2
php5 (Ubuntu package) - addressed in versions 5.3.2-1ubuntu4.21, 5.3.10-1ubuntu3.8
php (Alpine package) - update to 5.4.19-r0
HP-UX Web Server Suite - update to 3.30
dev-lang/php - update to 5.5.16

• http://php.net/ChangeLog-5.php

• Ubuntu update for PHP
• Slackware Linux update for php
• Man-in-the-Middle (MitM) attack in php (Alpine package)
• SUSE Linux update for PHP5
• SUSE Linux update for PHP5
• Multiple vulnerabilities in HP-UX Apache Server Suite running Apache Tomcat or PHP
• Gentoo update for PHP