CVE:CVE-2013-4314
CNNVD:CNNVD-201309-055
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。pyOpenSSL是其中的一个OpenSSL接口。
pyOpenSSL 0.13之前版本中的X509Extension类中存在漏洞，该漏洞源于程序没有正确地处理X.509证书的Subject Alternative Name字段中域名中的‘’字符。中间人攻击者可借助由合法证书颁发机构所发布的特制证书，利用该漏洞欺骗任意SSL服务器。
solution:Upgrade jean-paul_calderone pyopenssl to a higher version than 0.13,0.7,0.8:a1,0.9,0.10,0.11,0.11:a1,0.11:a2,0.12,and avoid the version (,0.13],0.7,0.8:a1,0.9,0.10,0.11,0.11:a1,0.11:a2,0.12; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,12.10,13.04,and avoid the version 10.04,12.04,12.10,13.04