{"id":"CVE-2013-0308","aliases":["EUVD-2013-0326","GHSA-p33f-8gh4-2vgm","RHSA-2013:0589"],"status":"published","title":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a...","description":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01661,"percentile":0.76844,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2013-03-08T21:00:00Z","modified":"2026-06-26T12:20:53Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"emacs-git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"emacs-git-el","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-all","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-cvs","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-daemon","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-debuginfo","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-email","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-gui","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-svn","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gitk","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"gitweb","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"perl-Git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"emacs-git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"emacs-git-el","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-all","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-cvs","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-daemon","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-debuginfo","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-email","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-gui","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-svn","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gitk","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gitweb","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perl-Git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-debuginfo","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"perl-Git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"emacs-git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"emacs-git-el","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-all","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-cvs","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-daemon","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-email","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-gui","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-svn","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gitk","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"gitweb","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-debuginfo","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perl-Git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"emacs-git","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"emacs-git-el","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-all","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-cvs","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-daemon","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-email","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-gui","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-svn","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gitk","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gitweb","fixed_in":["0:1.7.1-3.el6_4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-3.el6_4.1"}]}]}],"products":[{"vendor":"git-scm","product":"git"}],"references":[{"url":"http://www.securitytracker.com/id/1028205","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0589.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://support.apple.com/kb/HT5937","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82329","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00007.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://secunia.com/advisories/52361","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://marc.info/?l=git\u0026m=136134619013145\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/58148","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/52443","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=909977","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=804730","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-03/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/52467","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0308","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p33f-8gh4-2vgm"},{"url":"https://access.redhat.com/errata/RHSA-2013:0589","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0589.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0308","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-0308","description":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","status":"published","published":"2013-03-08T21:00:00Z","modified":"2024-08-06T14:25:08.74Z","updated_at":"2026-11-02T14:34:59.551717Z"}],"euvd":[{"id":"EUVD-2013-0326","description":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","status":"published","published":"2013-03-08T21:00:00Z","modified":"2024-08-06T14:25:08Z","updated_at":"2026-11-03T01:56:45.704567Z"}],"ghsa":[{"id":"GHSA-p33f-8gh4-2vgm","title":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a...","description":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","status":"published","published":"2022-05-05T02:48:45Z","modified":"2023-02-01T05:02:02Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:49:49.585103Z"}],"nvd":[{"id":"CVE-2013-0308","description":"The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.","status":"published","published":"2013-03-08T21:55:03.17Z","modified":"2026-06-16T23:49:10.01Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:24.091325Z"}],"osv":[{"id":"RHSA-2013:0589","title":"Red Hat Security Advisory: git security update","status":"published","published":"2024-09-15T20:38:15Z","modified":"2026-06-26T12:20:53.567448658Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}