CVE-2018-0489 Security feature bypass in Shibboleth XMLTooling-C before 1.6.4

What is CVE-2018-0489?

CVE-2018-0489 is a medium-severity vulnerability in Debian Debian Linux, published on 27 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486.

Weakness: CWE-347

Which versions are affected by CVE-2018-0489?

It affects 3 products.

Products include Arubanetworks Clearpass, Debian Debian Linux, Shibboleth Xmltooling-C.

How do I fix CVE-2018-0489?

Upgrade to a fixed version.

Is CVE-2018-0489 being exploited?

There is no known exploitation of CVE-2018-0489 in the wild and no public exploit code.

Other vulnerabilities in Debian Debian Linux

• CVE-2014-5342 Command injection in n/a Critical 10.0
• CVE-2014-6626 Auth bypass in n/a Critical 10.0
• CVE-2021-29145 Server-side request forgery in Aruba ClearPass Policy Manager Critical 9.8
• CVE-2020-7114 Missing authorization in ClearPass Policy Manager Critical 9.8
• CVE-2016-4401 Information disclosure in n/a Critical 9.8

All Debian Debian Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2018-0489, DLA-1296-1, DSA-4126-1, GHSA-4479-q654-wmq5, UBUNTU-CVE-2018-0489.