CVE-2013-0243

HighCVSS 7.4/10Last modified Jun 16, 2026

Description

haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
haskell-tls-extra	haskell-tls-extra	< 0.6.1

References

http://www.openwall.com/lists/oss-security/2013/01/30/6Mailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2013-0243Broken Link
https://security-tracker.debian.org/tracker/CVE-2013-0243Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/01/30/6Mailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2013-0243Broken Link
https://security-tracker.debian.org/tracker/CVE-2013-0243Third Party Advisory

Timeline

Published: Dec 5, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-02442.6Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are CVE-2013-02452.1The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict acces CVE-2013-02464.3The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, whic CVE-2013-02475.0OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cau CVE-2013-02486.8The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for upload CVE-2013-02497.5Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1 CVE-2013-02505.0The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote a CVE-2013-025110.0Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (CVE-2013-02525.0boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequenc CVE-2013-02535.8The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers CVE-2013-02543.6The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world CVE-2013-02556.8PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly decla