Test ID:	1.3.6.1.4.1.25623.1.0.107021
Category:	Web application abuses
Title:	CPython Man In The Middle Attack Vulnerability
Summary:	CPython suffers from a man in the middle attack vulnerability; via a crafted certificate.
Description:	Summary: CPython suffers from a man in the middle attack vulnerability via a crafted certificate. Vulnerability Insight: The ssl.match_hostname function in CPython does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate. Vulnerability Impact: Allows unauthorized modification. Affected Software/OS: CPython before 2.7.9 and 3.x before 3.3.3. Solution: Update to version 2.7.9, 3.3.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7440 BugTraq ID: 74707 http://www.securityfocus.com/bid/74707 http://seclists.org/oss-sec/2015/q2/483 http://seclists.org/oss-sec/2015/q2/523 RedHat Security Advisories: RHSA-2016:1166 https://access.redhat.com/errata/RHSA-2016:1166
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.