The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1166 advisory.

  - python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns     (CVE-2013-2099)

  - python: wildcard matching rules do not follow RFC 6125 (CVE-2013-7440)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the bzr package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The ssl.match_hostname function in CPython (aka Python)     before 2.7.9 and 3.x before 3.3.3 does not properly     handle wildcards in hostnames, which might allow     man-in-the-middle attackers to spoof servers via a     crafted certificate.(CVE-2013-7440)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2013-2099, CVE-2013-7440

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

python-setuptools was updated to fix one security issue.

The following vulnerability was fixed :

  - CVE-2013-7440: Non-RFC6125-compliant host name matching     was incorrect (bsc#930189)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2013-7440

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
193823	RHEL 6 / 7 : python27 (RHSA-2016:1166)	Nessus	Red Hat Local Security Checks	medium
137490	EulerOS 2.0 SP2 : bzr (EulerOS-SA-2020-1648)	Nessus	Huawei Local Security Checks	medium
89544	Fedora 22 : python-pymongo-2.5.2-8.fc22 (2016-52b294538d)	Nessus	Fedora Local Security Checks	medium
89540	Fedora 23 : python-pymongo-2.5.2-8.fc23 (2016-50abc3e885)	Nessus	Fedora Local Security Checks	medium
86217	SUSE SLED11 Security Update : Recommended update for python-setuptools (SUSE-SU-2015:1651-1)	Nessus	SuSE Local Security Checks	medium
85421	Fedora 22 : bzr-2.6.0-8.fc22 (2015-12001)	Nessus	Fedora Local Security Checks	medium
85420	Fedora 21 : bzr-2.6.0-7.fc21 (2015-11995)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-7440

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium