CVE-2013-6673: canonical ubuntu_linux Cryptographic Issues
Vulnerability summary
CVE-2013-6673 is a medium (CVSS 5.9) Cryptographic Issues vulnerability in canonical ubuntu_linux. EPSS estimates a 2.89% chance of exploitation in the next 30 days, higher than 86.6% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 11-12-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.89%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.89% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Mozilla3 products
- firefox< 26.0 | ≥ 24.0, < 24.2
- seamonkey< 2.23
- thunderbird< 24.2
Suse3 products
Canonical1 product
- ubuntu_linuxEOL12.04 | 12.10 | 13.04 | 13.10
Fedoraproject1 product
- fedoraEOL18 | 19 | 20
Opensuse1 product
- opensuseEOL12.2 | 12.3 | 13.1
5 vendors · 9 products
References
21 links- lists.opensuse.org/opensuse-updates/2013-12/msg00120.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00119.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00086.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00121.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 21 references
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00085.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2014-01/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-12/msg00087.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory