CVE:CVE-2013-2037
CNNVD:CNNVD-201305-065
httplib2 0.7.2及之前的版本和0.8及之前的版本中存在安全漏洞，该漏洞源于程序在完成初始化连接后，没有验证主题的Common Name或X.509证书的中subjectAltname字段的域名是否与服务器主机名匹配。攻击者可借助任意有效的证书利用该漏洞实施中间人攻击，欺骗SSL服务器。
solution:Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,12.10,13.04,and avoid the version 10.04,12.04,12.10,13.04; Upgrade httplib2_project httplib2 to a higher version than 0.7.2,0.8,and avoid the version (,0.7.2],0.8