Every CVE Search/ Get API key

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a...

4.3 MediumFix available

CVE-2013-0308 is a medium vulnerability (CVSS 4.3) in Git-scm Git, published March 8, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. Fixed in emacs-git 0:1.7.1-3.el6_4.1.

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Exploit likelihood

1.66%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Record
CVE-2013-0308
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Record
CVE-2013-0308
Updated
2026-11-02
EUVDEUVD-2013-0326 No score

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Record
EUVD-2013-0326
Updated
2026-11-03
GitHub AdvisoriesGHSA-p33f-8gh4-2vgm No score

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a...

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Record
GHSA-p33f-8gh4-2vgm
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
emacs-git
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git-el
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-all
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-cvs
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-daemon
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-email
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-gui
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-svn
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
Show 42 moreShow less
Affected packages
PackageAffectedFixed
gitk
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitweb
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
perl-Git
Red Hat:enterprise_linux:6::client
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git-el
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-all
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-cvs
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-daemon
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-email
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-gui
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-svn
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitk
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitweb
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
perl-Git
Red Hat:enterprise_linux:6::computenode
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
perl-Git
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git-el
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-all
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-cvs
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-daemon
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-email
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-gui
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-svn
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitk
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitweb
Red Hat:enterprise_linux:6::server
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
perl-Git
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
emacs-git-el
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-all
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-cvs
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-daemon
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-email
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-gui
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
git-svn
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitk
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1
gitweb
Red Hat:enterprise_linux:6::workstation
 before 0:1.7.1-3.el6_4.1
0:1.7.1-3.el6_4.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open