The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001] (CVE-2010-2253)

  - perl-libwww-perl: no hostname check against SSL certificate name by default (CVE-2011-0633)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001] (CVE-2010-2253)

  - perl-libwww-perl: no hostname check against SSL certificate name by default (CVE-2011-0633)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - perl-libwww-perl: multiple HTTP client download filename vulnerability [OCERT 2010-001] (CVE-2010-2253)

  - perl-libwww-perl: no hostname check against SSL certificate name by default (CVE-2011-0633)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

perl-libwww-perl did not verify enable host name checking of SSL certificates by default (CVE-2011-0633).

The remote host is affected by the vulnerability described in GLSA-201402-04 (libwww-perl: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libwww-perl. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to download a specially crafted       file with an application linked against libwww-perl, which could result       in overwritten files or arbitrary code execution by writing to a dotfile       in the user&rsquo;s home directory (such as .bashrc). Additionally, a remote       attacker could perform a Man-in-the-Middle attack.
  Workaround :

    There is no known workaround at this time.

This update fixes the issue that perl-libwww-perl does not enable host name verification of SSL certificates by default. This vulnerability could be exploited by a man in the middle attack. (CVE-2011-0633)

ID	Name	Product	Family	Severity
199120	RHEL 6 : perl-libwww-perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199058	RHEL 5 : perl-libwww-perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199017	RHEL 4 : perl-libwww-perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
75995	openSUSE Security Update : perl-libwww-perl (openSUSE-SU-2011:0552-1)	Nessus	SuSE Local Security Checks	medium
72314	GLSA-201402-04 : libwww-perl: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
69576	Amazon Linux AMI : perl-libwww-perl (ALAS-2011-17)	Nessus	Amazon Linux Local Security Checks	medium
54920	SuSE 11.1 Security Update : perl-libwww-perl (SAT Patch Number 4603)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-0633

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium