The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0159 advisory.

    This advisory aggregates security fixes for the python-pymongo SRPM in CIQ LTS 8.6. It addresses 6 CVEs:
    CVE-2013-7440, CVE-2015-20107, CVE-2023-32681, CVE-2013-2099, CVE-2023-24329, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not     properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via     a crafted certificate. (CVE-2013-7440)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1166 advisory.

    Python is an interpreted, interactive, object-oriented programming language that supports modules,     classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a     stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and     PostgreSQL.

    Security Fix(es):

    The following fix was applied to the python component:

    * The Python standard library HTTP client modules (such as httplib or urllib) did not perform verification     of TLS/SSL certificates when connecting to HTTPS servers. A man-in-the-middle attacker could use this flaw     to hijack connections and eavesdrop or modify transferred data. (CVE-2014-9365)

    Note: The Python standard library was updated to make it possible to enable certificate verification by     default. However, for backwards compatibility, verification remains disabled by default. Future updates     may change this default. Refer to the Knowledgebase article 2039753 linked to in the References section     for further details about this change. (BZ#1311044, BZ#1319774)

    The following fix was applied to the python-pymongo component:

    * A denial of service flaw was found in the way Python's SSL module implementation performed matching of     certain certificate names. A remote attacker able to obtain a valid certificate that contained multiple     wildcard characters could use this flaw to issue a request to validate such a certificate, resulting in     excessive consumption of CPU. (CVE-2013-2099)

    The following fix was applied to the python-pymongo and python-virtualenv components:

    * Multiple flaws were found in the way Python's SSL module performed matching of certificate names     containing wildcards. A remote attacker able to obtain a valid certificate that contained certain names     with wildcards could have them incorrectly accepted by Python SSL clients, not following the RFC 6125     recommendations. (CVE-2013-7440)

    The CVE-2013-2099 issue was discovered by Florian Weimer (Red Hat Product Security).

    Bug Fix(es) and Enhancement(s):

    The python27 SoftwareCollection has been updated to a later version, which provides a number of bug     fixes and enhancements over the previous version. Among others:

    * The python27-PyYAML package has been added, which contains a Python YAML module. PyYAML is a YAML parser     and emitter for Python; it is applicable for a broad range of tasks from complex configuration files to     object serialization and persistance.

    * Network security enhancements, described in the Python Enhancent Proposal 466, have been backported to     the Python standard library. The security enhancements include, for example, new features in the ssl     module, such as support for Server Name Indication (SNI) as well as support for new TLSv1.x protocols, new     hash algorithms in the hashlib module, and much more.

    * The python27-python-pip package has been upgraded to version 7.1.0.

    * The python27-python-virtualenv package has been upgraded to verion 13.1.0.

    * The python27-python-pymongo package has been upgraded to version 3.2.1.

    (BZ#1301481, BZ#1297784, BZ#1111464, BZ#1319774)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the bzr package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The ssl.match_hostname function in CPython (aka Python)     before 2.7.9 and 3.x before 3.3.3 does not properly     handle wildcards in hostnames, which might allow     man-in-the-middle attackers to spoof servers via a     crafted certificate.(CVE-2013-7440)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2013-2099, CVE-2013-7440

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

python-setuptools was updated to fix one security issue.

The following vulnerability was fixed :

  - CVE-2013-7440: Non-RFC6125-compliant host name matching     was incorrect (bsc#930189)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2013-7440

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
355426	Rocky Linux 8.6 [CIQ] Security Update: python2-bson / python2-bson-debuginfo / python2-pymongo / etc Multiple Vulnerabilities (ciqsa-2026_0159)	Nessus	Rocky Linux Local Security Checks	Local	high
218360	Linux Distros Unpatched Vulnerability : CVE-2013-7440	Nessus	Misc.	Local	medium
193823	RHEL 6 / 7 : python27 (RHSA-2016:1166)	Nessus	Red Hat Local Security Checks	Local	medium
137490	EulerOS 2.0 SP2 : bzr (EulerOS-SA-2020-1648)	Nessus	Huawei Local Security Checks	Local	medium
89544	Fedora 22 : python-pymongo-2.5.2-8.fc22 (2016-52b294538d)	Nessus	Fedora Local Security Checks	Local	medium
89540	Fedora 23 : python-pymongo-2.5.2-8.fc23 (2016-50abc3e885)	Nessus	Fedora Local Security Checks	Local	medium
86217	SUSE SLED11 Security Update : Recommended update for python-setuptools (SUSE-SU-2015:1651-1)	Nessus	SuSE Local Security Checks	Local	medium
85421	Fedora 22 : bzr-2.6.0-8.fc22 (2015-12001)	Nessus	Fedora Local Security Checks	Local	medium
85420	Fedora 21 : bzr-2.6.0-7.fc21 (2015-11995)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2013-7440

medium

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

medium

medium