Security issue in audit.ssl_certificate plugin

[LocutusOfBorg]

the embedded copy of ssl certificate handler suffers from a known CVE-2013-2099
http://bugs.python.org/issue17980

https://hg.python.org/cpython/rev/b9b521efeba3

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709071

CVE request: http://www.openwall.com/lists/oss-security/2013/05/15/6
Upstream: http://bugs.python.org/issue17980

[andresriancho]

Vulnerable code here

The patch we need to apply is here

[andresriancho]

@LocutusOfBorg thanks for finding and reporting this! I'm curious, how did you stumble with this issue?

[LocutusOfBorg]

I'm the Debian maintainer, and I tried to look at all the open bugs against w3af, to make sure they were all reported/fixed or to report them :)

[andresriancho]

I know who you're :)

But did you review all the source for w3af? Did a tool reported this?

[LocutusOfBorg]

I know who you're :)

they say traumatic experiences are easily forgotten :)

But did you review all the source for w3af? Did a tool reported this?

the CVE was reported against python, and somebody checked on codesearch.debian.net (a service that gives you a search engine about code in the whole debian main archive)

something like this I guess
https://codesearch.debian.net/results/def%20_dnsname_to_pat/page_0
might have been the right query to find embedded code copies of that implementation
(some false positive of course)

but I might be wrong eh :)