Unscored severity · published Apr 2, 2013
CVE-2013-1799
Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup…
–
CVSS
1%
EPSS
No
On KEV
Description
Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network. NOTE: this issue exists because of an incomplete fix for CVE-2013-0240.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GO
Gnome Online Accounts · Gnome
3.6.0; 3.6.1; 3.6.2; 3.7.1; 3.7.2; 3.7.3; +2 more · source: NVD
UL
Ubuntu Linux · Canonical
11.10; 12.04; 12.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1799
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1799
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-02/msg00046.html
Vendor Advisory
http://secunia.com/advisories/51976
Vendor Advisory
http://secunia.com/advisories/52791
ubuntu.com
http://ubuntu.com/usn/usn-1779-1
bugzilla.gnome.org
https://bugzilla.gnome.org/show_bug.cgi?id=693214
bugzilla.gnome.org
https://bugzilla.gnome.org/show_bug.cgi?id=695106
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation