CVE-2015-3148
Beschrijving
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
Vendors
Affected products
References
- advisories.mageia.org
- curl.haxx.se
- kb.juniper.net
- lists.apple.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.opensuse.org
- marc.info
- rhn.redhat.com
- www.debian.org
- www.mandriva.com
- www.mandriva.com
- www.oracle.com
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- www.ubuntu.com