← Terug naar CVE-database
Beschrijving
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.
Vendors
Haxx
Fedoraproject
Debian
Netapp
Apple
Splunk
Affected products
Curl
Fedora
Debian Linux
Clustered Data Ontap
Element Software
Hci Management Node
Solidfire
Hci Compute Node
Bootstrap Os
H300s
H300s Firmware
H500s
H500s Firmware
H700s
H700s Firmware
H410s Firmware
H410s
Macos
Universal Forwarder