CVE-2013-7440 in CPython
Summary
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/19/2015
Disclosure
06/07/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87755 | CPython sslmatch_hostname data processing | 19 | Not defined | Official fix | CVE-2013-7440 |