lib32-curl: authentication bypass

🗓️ 02 Feb 2016 00:00:00Reported by Arch LinuxType

archlinux

archlinux🔗 lists.archlinux.org👁 46 Views

lib32-curl: NTLM-authentication bypass vulnerabilit

Reporter	Title	Published	Views	Family All 93
IBM Security Bulletins	Security Bulletin: Vulnerability in Libcurl affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter (CVE-2016-0755)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by a curl vulnerability (CVE-2016-0755)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Libcurl affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2016-0755)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Libcurl affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2016-0755)	31 Jan 201902:25	–	ibm
FreeBSD	curl -- Credentials not checked	27 Jan 201600:00	–	freebsd
Tenable Nessus	Mac OS X 10.x < 10.12 Multiple Vulnerabilities	21 Oct 201600:00	–	nessus
Tenable Nessus	cURL/libcurl 7.x < 7.47.0 Multiple Vulnerabilities	11 Nov 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2016-652)	10 Feb 201600:00	–	nessus
Tenable Nessus	Debian DSA-3455-1 : curl - security update	28 Jan 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : curl (EulerOS-SA-2019-1665)	27 Jun 201900:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
any	any	any	lib32-curl	7.47.0-1	UNKNOWN

Source	Link
curl	www.curl.haxx.se/docs/adv_20160127A.html
web	www.web.nvd.nist.gov/view/vuln/detail

02 Feb 2016 00:00Current

2.4Low risk

Vulners AI Score2.4

EPSS0.00346

lib32-curl ntlm-authenticated proxy connection reuse authentication bypass remote attackers unix