简体中文

CVE-2011-0633：详情

CVE-2011-0633

0.14%V4
2011-05-13
22h00 +00:00
A03-Injection
Network
2024-09-16
17h53 +00:00
CVE.org
NVD
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

指标

指标 评分 严重程度 CVSS 向量 来源
V2 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N nvd@nist.gov

EPSS

EPSS 是一种预测漏洞被利用可能性的评分模型。

EPSS 评分

EPSS 模型生成一个介于 0 到 1（即 0% 到 100%）之间的概率评分。评分越高，漏洞被利用的可能性越大。

EPSS 百分位

百分位用于根据 EPSS 评分对 CVE 进行排名。例如，EPSS 百分位为第 95 的 CVE，其被利用的可能性高于 95% 的其他 CVE。因此，百分位可用于比较不同 CVE 的 EPSS 评分。
EPSS First.org

相关产品

配置 0

Gisle_aas>>Libwww-perl >> Version 0.01

Gisle_aas>>Libwww-perl >> Version 0.02

Gisle_aas>>Libwww-perl >> Version 0.03

Gisle_aas>>Libwww-perl >> Version 0.04

Gisle_aas>>Libwww-perl >> Version 5.00

Gisle_aas>>Libwww-perl >> Version 5.01

Gisle_aas>>Libwww-perl >> Version 5.02

Gisle_aas>>Libwww-perl >> Version 5.03

Gisle_aas>>Libwww-perl >> Version 5.04

Gisle_aas>>Libwww-perl >> Version 5.05

Gisle_aas>>Libwww-perl >> Version 5.06

Gisle_aas>>Libwww-perl >> Version 5.07

Gisle_aas>>Libwww-perl >> Version 5.08

Gisle_aas>>Libwww-perl >> Version 5.09

Gisle_aas>>Libwww-perl >> Version 5.10

Gisle_aas>>Libwww-perl >> Version 5.11

Gisle_aas>>Libwww-perl >> Version 5.12

Gisle_aas>>Libwww-perl >> Version 5.13

Gisle_aas>>Libwww-perl >> Version 5.14

Gisle_aas>>Libwww-perl >> Version 5.15

Gisle_aas>>Libwww-perl >> Version 5.16

Gisle_aas>>Libwww-perl >> Version 5.17

Gisle_aas>>Libwww-perl >> Version 5.18

Gisle_aas>>Libwww-perl >> Version 5.18_03

Gisle_aas>>Libwww-perl >> Version 5.18_04

Gisle_aas>>Libwww-perl >> Version 5.18_05

Gisle_aas>>Libwww-perl >> Version 5.19

Gisle_aas>>Libwww-perl >> Version 5.20

Gisle_aas>>Libwww-perl >> Version 5.21

Gisle_aas>>Libwww-perl >> Version 5.22

Gisle_aas>>Libwww-perl >> Version 5.30

Gisle_aas>>Libwww-perl >> Version 5.31

Gisle_aas>>Libwww-perl >> Version 5.32

Gisle_aas>>Libwww-perl >> Version 5.33

Gisle_aas>>Libwww-perl >> Version 5.34

Gisle_aas>>Libwww-perl >> Version 5.35

Gisle_aas>>Libwww-perl >> Version 5.36

Gisle_aas>>Libwww-perl >> Version 5.41

Gisle_aas>>Libwww-perl >> Version 5.42

Gisle_aas>>Libwww-perl >> Version 5.43

Gisle_aas>>Libwww-perl >> Version 5.44

Gisle_aas>>Libwww-perl >> Version 5.45

Gisle_aas>>Libwww-perl >> Version 5.46

Gisle_aas>>Libwww-perl >> Version 5.47

Gisle_aas>>Libwww-perl >> Version 5.48

Gisle_aas>>Libwww-perl >> Version 5.49

Gisle_aas>>Libwww-perl >> Version 5.50

Gisle_aas>>Libwww-perl >> Version 5.51

Gisle_aas>>Libwww-perl >> Version 5.52

Gisle_aas>>Libwww-perl >> Version 5.53

Gisle_aas>>Libwww-perl >> Version 5.53_90

Gisle_aas>>Libwww-perl >> Version 5.53_91

Gisle_aas>>Libwww-perl >> Version 5.53_92

Gisle_aas>>Libwww-perl >> Version 5.53_93

Gisle_aas>>Libwww-perl >> Version 5.53_94

Gisle_aas>>Libwww-perl >> Version 5.53_95

Gisle_aas>>Libwww-perl >> Version 5.53_96

Gisle_aas>>Libwww-perl >> Version 5.53_97

Gisle_aas>>Libwww-perl >> Version 5.60

Gisle_aas>>Libwww-perl >> Version 5.61

Gisle_aas>>Libwww-perl >> Version 5.62

Gisle_aas>>Libwww-perl >> Version 5.63

Gisle_aas>>Libwww-perl >> Version 5.64

Gisle_aas>>Libwww-perl >> Version 5.65

Gisle_aas>>Libwww-perl >> Version 5.66

Gisle_aas>>Libwww-perl >> Version 5.67

Gisle_aas>>Libwww-perl >> Version 5.68

Gisle_aas>>Libwww-perl >> Version 5.69

Gisle_aas>>Libwww-perl >> Version 5.70

Gisle_aas>>Libwww-perl >> Version 5.71

Gisle_aas>>Libwww-perl >> Version 5.72

Gisle_aas>>Libwww-perl >> Version 5.73

Gisle_aas>>Libwww-perl >> Version 5.74

Gisle_aas>>Libwww-perl >> Version 5.75

Gisle_aas>>Libwww-perl >> Version 5.76

Gisle_aas>>Libwww-perl >> Version 5.77

Gisle_aas>>Libwww-perl >> Version 5.78

Gisle_aas>>Libwww-perl >> Version 5.79

Gisle_aas>>Libwww-perl >> Version 5.800

Gisle_aas>>Libwww-perl >> Version 5.801

Gisle_aas>>Libwww-perl >> Version 5.802

Gisle_aas>>Libwww-perl >> Version 5.803

Gisle_aas>>Libwww-perl >> Version 5.804

Gisle_aas>>Libwww-perl >> Version 5.805

Gisle_aas>>Libwww-perl >> Version 5.806

Gisle_aas>>Libwww-perl >> Version 5.807

Gisle_aas>>Libwww-perl >> Version 5.808

Gisle_aas>>Libwww-perl >> Version 5.810

Gisle_aas>>Libwww-perl >> Version 5.811

Gisle_aas>>Libwww-perl >> Version 5.812

Gisle_aas>>Libwww-perl >> Version 5.813

Gisle_aas>>Libwww-perl >> Version 5.814

Gisle_aas>>Libwww-perl >> Version 5.815

Gisle_aas>>Libwww-perl >> Version 5.816

Gisle_aas>>Libwww-perl >> Version 5.817

Gisle_aas>>Libwww-perl >> Version 5.818

Gisle_aas>>Libwww-perl >> Version 5.819

Gisle_aas>>Libwww-perl >> Version 5.820

Gisle_aas>>Libwww-perl >> Version 5.821

Gisle_aas>>Libwww-perl >> Version 5.822

Gisle_aas>>Libwww-perl >> Version 5.823

Gisle_aas>>Libwww-perl >> Version 5.824

Gisle_aas>>Libwww-perl >> Version 5.825

Gisle_aas>>Libwww-perl >> Version 5.826

Gisle_aas>>Libwww-perl >> Version 5.827

Gisle_aas>>Libwww-perl >> Version 5.828

Gisle_aas>>Libwww-perl >> Version 5.829

Gisle_aas>>Libwww-perl >> Version 5.830

Gisle_aas>>Libwww-perl >> Version 5.831

Gisle_aas>>Libwww-perl >> Version 5.832

Gisle_aas>>Libwww-perl >> Version 5.833

Gisle_aas>>Libwww-perl >> Version 5.834

Gisle_aas>>Libwww-perl >> Version 5.836

Gisle_aas>>Libwww-perl >> Version 5b5

Gisle_aas>>Libwww-perl >> Version 5b6

Gisle_aas>>Libwww-perl >> Version 5b7

Gisle_aas>>Libwww-perl >> Version 5b8

Gisle_aas>>Libwww-perl >> Version 5b9

Gisle_aas>>Libwww-perl >> Version 5b10

Gisle_aas>>Libwww-perl >> Version 5b11

Gisle_aas>>Libwww-perl >> Version 5b12

Gisle_aas>>Libwww-perl >> Version 5b13

Search.cpan>>Libwww-perl >> Version 至（含） 5.837

Search.cpan>>Libwww-perl >> Version 5.40_01

参考资料

cvefind.com 上展示的信息来源于多个精心选择的权威数据源。CVE 数据由 MITRE Corporation 和 National Vulnerability Database (NVD) 提供。已知被利用漏洞（KEV）目录来源于 Cybersecurity and Infrastructure Security Agency (CISA)，EPSS 评分来自 FIRST.org。此外，软件弱点（CWE）和常见攻击模式（CAPEC）数据由 MITRE Corporation 维护，硬件和软件配置（CPE）信息由 NVD 提供。