Unscored severity · published Apr 2, 2013
CVE-2013-0240
Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GO
Gnome Online Accounts · Gnome
3.4.0; 3.4.1; 3.6.0; 3.6.1; 3.6.2; 3.7.1; +3 more · source: NVD
UL
Ubuntu Linux · Canonical
11.10; 12.04; 12.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0240
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0240
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-02/msg00046.html
Vendor Advisory
http://secunia.com/advisories/51976
Vendor Advisory
http://secunia.com/advisories/52791
ubuntu.com
http://ubuntu.com/usn/usn-1779-1
bugzilla.gnome.org
https://bugzilla.gnome.org/show_bug.cgi?id=693214
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=894352
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation