cve/2013/CVE-2013-7440.md

CVE-2013-7440

Description

The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

POC

Reference

No PoCs from references.

Github

• https://github.com/BSolarV/cvedetails-summary