The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:1200 advisory.

    The python-glanceclient package provides a client for the OpenStack Glance     API.

    It was discovered that the Python Glance client did not properly check     SSL certificates. An attacker could use this flaw to conduct     man-in-the-middle attacks. (CVE-2013-4111)

    Red Hat would like to thank the OpenStack project for reporting this issue.
    Upstream acknowledges Thomas Leaman of HP as the original reporter.

    All users of python-glanceclient are advised to upgrade to this updated     package, which corrects this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update of python-glanceclient fixed SSL certificate CNAME checking.

Fix SSL certificate CNAME checking.

Fixes CVE-2013-4111

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Thomas Leaman discovered that the Python client library for Glance did not properly verify SSL certificates. A remote attacker could exploit this to perform a man in the middle attack.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
210196	RHEL 6 : python-glanceclient (RHSA-2013:1200)	Nessus	Red Hat Local Security Checks	medium
75118	openSUSE Security Update : python-glanceclient (openSUSE-SU-2013:1330-1)	Nessus	SuSE Local Security Checks	medium
70909	Fedora 19 : python-glanceclient-0.9.0-3.fc19 (2013-14814)	Nessus	Fedora Local Security Checks	medium
70583	Ubuntu 13.04 : python-glanceclient vulnerability (USN-2004-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2013-4111

medium

Tenable Plugins

medium

medium

medium

medium