NVD Vulnerability Detail

CVE-2014-3522

Summary	The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
Publication Date	Aug. 20, 2014, 3:55 a.m.
Registration Date	Jan. 26, 2021, 3:10 p.m.
Last Update	Nov. 21, 2024, 11:08 a.m.

CVSS2.0 : MEDIUM
Score	4.0
Vector	AV:N/AC:H/Au:N/C:P/I:P/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:subversion:1.6.10:::::::*
cpe:2.3:a:apache:subversion:1.6.19:::::::*
cpe:2.3:a:apache:subversion:1.8.2:::::::*
cpe:2.3:a:apache:subversion:1.4.5:::::::*
cpe:2.3:a:apache:subversion:1.7.3:::::::*
cpe:2.3:a:apache:subversion:1.6.20:::::::*
cpe:2.3:a:apache:subversion:1.7.17:::::::*
cpe:2.3:a:apache:subversion:1.8.0:::::::*
cpe:2.3:a:apache:subversion:1.4.2:::::::*
cpe:2.3:a:apache:subversion:1.6.2:::::::*
cpe:2.3:a:apache:subversion:1.7.1:::::::*
cpe:2.3:a:apache:subversion:1.7.11:::::::*
cpe:2.3:a:apache:subversion:1.7.16:::::::*
cpe:2.3:a:apache:subversion:1.6.18:::::::*
cpe:2.3:a:apache:subversion:1.6.16:::::::*
cpe:2.3:a:apache:subversion:1.5.5:::::::*
cpe:2.3:a:apache:subversion:1.7.4:::::::*
cpe:2.3:a:apache:subversion:1.6.21:::::::*
cpe:2.3:a:apache:subversion:1.6.5:::::::*
cpe:2.3:a:apache:subversion:1.7.6:::::::*
cpe:2.3:a:apache:subversion:1.5.3:::::::*
cpe:2.3:a:apache:subversion:1.4.0:::::::*
cpe:2.3:a:apache:subversion:1.8.1:::::::*
cpe:2.3:a:apache:subversion:1.4.4:::::::*
cpe:2.3:a:apache:subversion:1.5.7:::::::*
cpe:2.3:a:apache:subversion:1.4.6:::::::*
cpe:2.3:a:apache:subversion:1.8.9:::::::*
cpe:2.3:a:apache:subversion:1.7.9:::::::*
cpe:2.3:a:apache:subversion:1.7.12:::::::*
cpe:2.3:a:apache:subversion:1.6.3:::::::*
cpe:2.3:a:apache:subversion:1.6.8:::::::*
cpe:2.3:a:apache:subversion:1.7.10:::::::*
cpe:2.3:a:apache:subversion:1.8.5:::::::*
cpe:2.3:a:apache:subversion:1.6.13:::::::*
cpe:2.3:a:apache:subversion:1.7.7:::::::*
cpe:2.3:a:apache:subversion:1.6.0:::::::*
cpe:2.3:a:apache:subversion:1.5.8:::::::*
cpe:2.3:a:apache:subversion:1.5.2:::::::*
cpe:2.3:a:apache:subversion:1.6.7:::::::*
cpe:2.3:a:apache:subversion:1.6.12:::::::*
cpe:2.3:a:apache:subversion:1.8.6:::::::*
cpe:2.3:a:apache:subversion:1.7.2:::::::*
cpe:2.3:a:apache:subversion:1.6.1:::::::*
cpe:2.3:a:apache:subversion:1.6.4:::::::*
cpe:2.3:a:apache:subversion:1.7.13:::::::*
cpe:2.3:a:apache:subversion:1.8.4:::::::*
cpe:2.3:a:apache:subversion:1.6.23:::::::*
cpe:2.3:a:apache:subversion:1.8.3:::::::*
cpe:2.3:a:apache:subversion:1.7.8:::::::*
cpe:2.3:a:apache:subversion:1.4.3:::::::*
cpe:2.3:a:apache:subversion:1.8.7:::::::*
cpe:2.3:a:apache:subversion:1.6.15:::::::*
cpe:2.3:a:apache:subversion:1.5.4:::::::*
cpe:2.3:a:apache:subversion:1.7.14:::::::*
cpe:2.3:a:apache:subversion:1.6.11:::::::*
cpe:2.3:a:apache:subversion:1.7.5:::::::*
cpe:2.3:a:apache:subversion:1.6.14:::::::*
cpe:2.3:a:apache:subversion:1.5.1:::::::*
cpe:2.3:a:apache:subversion:1.7.15:::::::*
cpe:2.3:a:apache:subversion:1.6.17:::::::*
cpe:2.3:a:apache:subversion:1.5.6:::::::*
cpe:2.3:a:apache:subversion:1.5.0:::::::*
cpe:2.3:a:apache:subversion:1.6.6:::::::*
cpe:2.3:a:apache:subversion:1.6.9:::::::*
cpe:2.3:a:apache:subversion:1.4.1:::::::*
cpe:2.3:a:apache:subversion:1.8.8:::::::*
cpe:2.3:a:apache:subversion:1.7.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:opensuse:opensuse:12.3:::::::*
cpe:2.3:o:opensuse:opensuse:13.1:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:apple:xcode:6.1.1:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html	Mailing List Third Party Advisory
2	http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html	Third Party Advisory
4	http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html	Third Party Advisory
5	http://secunia.com/advisories/59432
6	http://secunia.com/advisories/59432
7	http://secunia.com/advisories/59584
8	http://secunia.com/advisories/59584
9	http://secunia.com/advisories/60100
10	http://secunia.com/advisories/60100
11	http://secunia.com/advisories/60722
12	http://secunia.com/advisories/60722
13	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
14	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
15	http://www.osvdb.org/109996
16	http://www.osvdb.org/109996
17	http://www.securityfocus.com/bid/69237	Third Party Advisory VDB Entry
18	http://www.securityfocus.com/bid/69237	Third Party Advisory VDB Entry
19	http://www.ubuntu.com/usn/USN-2316-1	Third Party Advisory
20	http://www.ubuntu.com/usn/USN-2316-1	Third Party Advisory
21	https://exchange.xforce.ibmcloud.com/vulnerabilities/95090
22	https://exchange.xforce.ibmcloud.com/vulnerabilities/95090
23	https://exchange.xforce.ibmcloud.com/vulnerabilities/95311
24	https://exchange.xforce.ibmcloud.com/vulnerabilities/95311
25	https://security.gentoo.org/glsa/201610-05
26	https://security.gentoo.org/glsa/201610-05
27	https://subversion.apache.org/security/CVE-2014-3522-advisory.txt	Patch Vendor Advisory
28	https://subversion.apache.org/security/CVE-2014-3522-advisory.txt	Patch Vendor Advisory
29	https://support.apple.com/HT204427	Third Party Advisory
30	https://support.apple.com/HT204427	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-297	ホストの不一致による証明書の不適切な検証	https://cwe.mitre.org/data/definitions/297.html

JVN Vulnerability Information

Apache Subversion の Serf RA レイヤにおけるサーバになりすまされる脆弱性

Title	Apache Subversion の Serf RA レイヤにおけるサーバになりすまされる脆弱性
Summary	Apache Subversion の Serf RA レイヤは、X.509 証明書の Common Name (CN) または subjectAltName フィールドのワイルドカードを適切に処理しないため、サーバになりすまされる脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-297: Improper Validation of Certificate with Host Mismatch (ホストの不一致による証明書の不適切な検証) と識別されています。 http://cwe.mitre.org/data/definitions/297.html
Possible impacts	中間者攻撃により、巧妙に細工された証明書を介して、サーバになりすまされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 14, 2014, midnight
Registration Date	Aug. 21, 2014, 4:29 p.m.
Last Update	Oct. 30, 2015, 4:46 p.m.

Affected System

Apache Software Foundation

Apache Subversion 1.7.18 未満の 1.4.0 から 1.7.x

Apache Subversion 1.8.10 未満の 1.8.x

アップル

Xcode 6.2 未満 (OS X Mavericks v10.9.4 以降)

Canonical

Ubuntu 12.04 LTS

Ubuntu 14.04 LTS

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Apache Software Foundation
1	CVE-2014-3522-advisory	https://subversion.apache.org/security/CVE-2014-3522-advisory.txt
Common Vulnerabilities and Exposures (CVE)
2	CVE-2014-3522	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3522
National Vulnerability Database (NVD)
3	CVE-2014-3522	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3522

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2015-03-09-4 Xcode 6.2	http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html
Apple Security Updates
2	HT204427	https://support.apple.com/en-us/HT204427
Apple セキュリティアップデート
3	HT204427	http://support.apple.com/ja-jp/HT204427
Oracle Technology Network
4	Oracle Solaris Third Party Bulletin - October 2015	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Ubuntu Security Notice
5	USN-2316-1	http://www.ubuntu.com/usn/USN-2316-1/

その他

No	Name	URL
JVN
1	JVNVU#90171154	http://jvn.jp/vu/JVNVU90171154/index.html
関連文書
2	apache-subversion-cve20143528-info-disc (95090)	http://xforce.iss.net/xforce/xfdb/95090

Change Log

No	Changed Details	Date of change
0	[2014年08月21日] 掲載 [2015年03月13日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT204427) を追加ベンダ情報：アップル (APPLE-SA-2015-03-09-4 Xcode 6.2) を追加参考情報：JVN (JVNVU#90171154) を追加 [2015年10月30日] ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - October 2015) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:subversion:1.6.10:::::::*
cpe:2.3:a:apache:subversion:1.6.19:::::::*
cpe:2.3:a:apache:subversion:1.8.2:::::::*
cpe:2.3:a:apache:subversion:1.4.5:::::::*
cpe:2.3:a:apache:subversion:1.7.3:::::::*
cpe:2.3:a:apache:subversion:1.6.20:::::::*
cpe:2.3:a:apache:subversion:1.7.17:::::::*
cpe:2.3:a:apache:subversion:1.8.0:::::::*
cpe:2.3:a:apache:subversion:1.4.2:::::::*
cpe:2.3:a:apache:subversion:1.6.2:::::::*
cpe:2.3:a:apache:subversion:1.7.1:::::::*
cpe:2.3:a:apache:subversion:1.7.11:::::::*
cpe:2.3:a:apache:subversion:1.7.16:::::::*
cpe:2.3:a:apache:subversion:1.6.18:::::::*
cpe:2.3:a:apache:subversion:1.6.16:::::::*
cpe:2.3:a:apache:subversion:1.5.5:::::::*
cpe:2.3:a:apache:subversion:1.7.4:::::::*
cpe:2.3:a:apache:subversion:1.6.21:::::::*
cpe:2.3:a:apache:subversion:1.6.5:::::::*
cpe:2.3:a:apache:subversion:1.7.6:::::::*
cpe:2.3:a:apache:subversion:1.5.3:::::::*
cpe:2.3:a:apache:subversion:1.4.0:::::::*
cpe:2.3:a:apache:subversion:1.8.1:::::::*
cpe:2.3:a:apache:subversion:1.4.4:::::::*
cpe:2.3:a:apache:subversion:1.5.7:::::::*
cpe:2.3:a:apache:subversion:1.4.6:::::::*
cpe:2.3:a:apache:subversion:1.8.9:::::::*
cpe:2.3:a:apache:subversion:1.7.9:::::::*
cpe:2.3:a:apache:subversion:1.7.12:::::::*
cpe:2.3:a:apache:subversion:1.6.3:::::::*
cpe:2.3:a:apache:subversion:1.6.8:::::::*
cpe:2.3:a:apache:subversion:1.7.10:::::::*
cpe:2.3:a:apache:subversion:1.8.5:::::::*
cpe:2.3:a:apache:subversion:1.6.13:::::::*
cpe:2.3:a:apache:subversion:1.7.7:::::::*
cpe:2.3:a:apache:subversion:1.6.0:::::::*
cpe:2.3:a:apache:subversion:1.5.8:::::::*
cpe:2.3:a:apache:subversion:1.5.2:::::::*
cpe:2.3:a:apache:subversion:1.6.7:::::::*
cpe:2.3:a:apache:subversion:1.6.12:::::::*
cpe:2.3:a:apache:subversion:1.8.6:::::::*
cpe:2.3:a:apache:subversion:1.7.2:::::::*
cpe:2.3:a:apache:subversion:1.6.1:::::::*
cpe:2.3:a:apache:subversion:1.6.4:::::::*
cpe:2.3:a:apache:subversion:1.7.13:::::::*
cpe:2.3:a:apache:subversion:1.8.4:::::::*
cpe:2.3:a:apache:subversion:1.6.23:::::::*
cpe:2.3:a:apache:subversion:1.8.3:::::::*
cpe:2.3:a:apache:subversion:1.7.8:::::::*
cpe:2.3:a:apache:subversion:1.4.3:::::::*
cpe:2.3:a:apache:subversion:1.8.7:::::::*
cpe:2.3:a:apache:subversion:1.6.15:::::::*
cpe:2.3:a:apache:subversion:1.5.4:::::::*
cpe:2.3:a:apache:subversion:1.7.14:::::::*
cpe:2.3:a:apache:subversion:1.6.11:::::::*
cpe:2.3:a:apache:subversion:1.7.5:::::::*
cpe:2.3:a:apache:subversion:1.6.14:::::::*
cpe:2.3:a:apache:subversion:1.5.1:::::::*
cpe:2.3:a:apache:subversion:1.7.15:::::::*
cpe:2.3:a:apache:subversion:1.6.17:::::::*
cpe:2.3:a:apache:subversion:1.5.6:::::::*
cpe:2.3:a:apache:subversion:1.5.0:::::::*
cpe:2.3:a:apache:subversion:1.6.6:::::::*
cpe:2.3:a:apache:subversion:1.6.9:::::::*
cpe:2.3:a:apache:subversion:1.4.1:::::::*
cpe:2.3:a:apache:subversion:1.8.8:::::::*
cpe:2.3:a:apache:subversion:1.7.0:::::::*