The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and     other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not     enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via     man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be     argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be     independently assigned CVE identifiers for not working around this limitation. However, because this API     was modified within LWP, a single CVE identifier has been assigned. (CVE-2011-0633)

Note that Nessus relies on the presence of the package as reported by the vendor.

perl-libwww-perl did not verify enable host name checking of SSL certificates by default (CVE-2011-0633).

The remote host is affected by the vulnerability described in GLSA-201402-04 (libwww-perl: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libwww-perl. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to download a specially crafted       file with an application linked against libwww-perl, which could result       in overwritten files or arbitrary code execution by writing to a dotfile       in the user&rsquo;s home directory (such as .bashrc). Additionally, a remote       attacker could perform a Man-in-the-Middle attack.
  Workaround :

    There is no known workaround at this time.

This update fixes the issue that perl-libwww-perl does not enable host name verification of SSL certificates by default. This vulnerability could be exploited by a man in the middle attack. (CVE-2011-0633)

ID	Name	Product	Family	Type	Severity
217380	Linux Distros Unpatched Vulnerability : CVE-2011-0633	Nessus	Misc.	Local	critical
75995	openSUSE Security Update : perl-libwww-perl (openSUSE-SU-2011:0552-1)	Nessus	SuSE Local Security Checks	Local	medium
72314	GLSA-201402-04 : libwww-perl: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	medium
69576	Amazon Linux AMI : perl-libwww-perl (ALAS-2011-17)	Nessus	Amazon Linux Local Security Checks	Local	medium
54920	SuSE 11.1 Security Update : perl-libwww-perl (SAT Patch Number 4603)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2011-0633

medium

Tenable Plugins

critical

medium

medium

medium

medium