Lucene search

[email protected]CVE-2014-0015

HistoryFeb 02, 2014 - 12:55 a.m.

CVE-2014-0015

2014-02-0200:55:05

CWE-287

[email protected]

web.nvd.nist.gov

100

cve-2014-0015

curl

libcurl

ntlm

authentication

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

High

EPSS

0.008

Percentile

81.1%

JSON

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.

Affected configurations

NVD

Node

haxxlibcurlMatch7.10.6

haxxlibcurlMatch7.10.7

haxxlibcurlMatch7.10.8

haxxlibcurlMatch7.11.0

haxxlibcurlMatch7.11.1

haxxlibcurlMatch7.11.2

haxxlibcurlMatch7.12.0

haxxlibcurlMatch7.12.1

haxxlibcurlMatch7.12.2

haxxlibcurlMatch7.12.3

haxxlibcurlMatch7.13.0

haxxlibcurlMatch7.13.1

haxxlibcurlMatch7.13.2

haxxlibcurlMatch7.14.0

haxxlibcurlMatch7.14.1

haxxlibcurlMatch7.15.0

haxxlibcurlMatch7.15.1

haxxlibcurlMatch7.15.2

haxxlibcurlMatch7.15.3

haxxlibcurlMatch7.15.4

haxxlibcurlMatch7.15.5

haxxlibcurlMatch7.16.0

haxxlibcurlMatch7.16.1

haxxlibcurlMatch7.16.2

haxxlibcurlMatch7.16.3

haxxlibcurlMatch7.16.4

haxxlibcurlMatch7.17.0

haxxlibcurlMatch7.17.1

haxxlibcurlMatch7.18.0

haxxlibcurlMatch7.18.1

haxxlibcurlMatch7.18.2

haxxlibcurlMatch7.19.0

haxxlibcurlMatch7.19.1

haxxlibcurlMatch7.19.2

haxxlibcurlMatch7.19.3

haxxlibcurlMatch7.19.4

haxxlibcurlMatch7.19.5

haxxlibcurlMatch7.19.6

haxxlibcurlMatch7.19.7

haxxlibcurlMatch7.20.0

haxxlibcurlMatch7.20.1

haxxlibcurlMatch7.21.0

haxxlibcurlMatch7.21.1

haxxlibcurlMatch7.21.2

haxxlibcurlMatch7.21.3

haxxlibcurlMatch7.21.4

haxxlibcurlMatch7.21.5

haxxlibcurlMatch7.21.6

haxxlibcurlMatch7.21.7

haxxlibcurlMatch7.22.0

haxxlibcurlMatch7.23.0

haxxlibcurlMatch7.23.1

haxxlibcurlMatch7.24.0

haxxlibcurlMatch7.25.0

haxxlibcurlMatch7.26.0

haxxlibcurlMatch7.27.0

haxxlibcurlMatch7.28.0

haxxlibcurlMatch7.28.1

haxxlibcurlMatch7.29.0

haxxlibcurlMatch7.30.0

haxxlibcurlMatch7.31.0

haxxlibcurlMatch7.32.0

haxxlibcurlMatch7.33.0

haxxlibcurlMatch7.34.0

Node

haxxcurlMatch7.10.6

haxxcurlMatch7.10.7

haxxcurlMatch7.10.8

haxxcurlMatch7.11.0

haxxcurlMatch7.11.1

haxxcurlMatch7.11.2

haxxcurlMatch7.12.0

haxxcurlMatch7.12.1

haxxcurlMatch7.12.2

haxxcurlMatch7.12.3

haxxcurlMatch7.13.0

haxxcurlMatch7.13.1

haxxcurlMatch7.13.2

haxxcurlMatch7.14.0

haxxcurlMatch7.14.1

haxxcurlMatch7.15.0

haxxcurlMatch7.15.1

haxxcurlMatch7.15.2

haxxcurlMatch7.15.3

haxxcurlMatch7.15.4

haxxcurlMatch7.15.5

haxxcurlMatch7.16.0

haxxcurlMatch7.16.1

haxxcurlMatch7.16.2

haxxcurlMatch7.16.3

haxxcurlMatch7.16.4

haxxcurlMatch7.17.0

haxxcurlMatch7.17.1

haxxcurlMatch7.18.0

haxxcurlMatch7.18.1

haxxcurlMatch7.18.2

haxxcurlMatch7.19.0

haxxcurlMatch7.19.1

haxxcurlMatch7.19.2

haxxcurlMatch7.19.3

haxxcurlMatch7.19.4

haxxcurlMatch7.19.5

haxxcurlMatch7.19.6

haxxcurlMatch7.19.7

haxxcurlMatch7.20.0

haxxcurlMatch7.20.1

haxxcurlMatch7.21.0

haxxcurlMatch7.21.1

haxxcurlMatch7.21.2

haxxcurlMatch7.21.3

haxxcurlMatch7.21.4

haxxcurlMatch7.21.5

haxxcurlMatch7.21.6

haxxcurlMatch7.21.7

haxxcurlMatch7.22.0

haxxcurlMatch7.23.0

haxxcurlMatch7.23.1

haxxcurlMatch7.24.0

haxxcurlMatch7.25.0

haxxcurlMatch7.26.0

haxxcurlMatch7.27.0

haxxcurlMatch7.28.0

haxxcurlMatch7.28.1

haxxcurlMatch7.29.0

haxxcurlMatch7.30.0

haxxcurlMatch7.31.0

haxxcurlMatch7.32.0

haxxcurlMatch7.33.0

haxxcurlMatch7.34.0

VendorProductVersionCPE
haxxlibcurl7.28.0cpe:/a:haxx:libcurl:7.28.0:::
haxxlibcurl7.14.0cpe:/a:haxx:libcurl:7.14.0:::
haxxlibcurl7.13.1cpe:/a:haxx:libcurl:7.13.1:::
haxxlibcurl7.15.2cpe:/a:haxx:libcurl:7.15.2:::
haxxlibcurl7.19.4cpe:/a:haxx:libcurl:7.19.4:::
haxxlibcurl7.21.7cpe:/a:haxx:libcurl:7.21.7:::
haxxlibcurl7.13.0cpe:/a:haxx:libcurl:7.13.0:::
haxxlibcurl7.21.5cpe:/a:haxx:libcurl:7.21.5:::
haxxlibcurl7.28.1cpe:/a:haxx:libcurl:7.28.1:::
haxxlibcurl7.16.4cpe:/a:haxx:libcurl:7.16.4:::

Vendor	Product	Version	CPE
haxx	libcurl	7.28.0	cpe:/a:haxx:libcurl:7.28.0:::
haxx	libcurl	7.14.0	cpe:/a:haxx:libcurl:7.14.0:::
haxx	libcurl	7.13.1	cpe:/a:haxx:libcurl:7.13.1:::
haxx	libcurl	7.15.2	cpe:/a:haxx:libcurl:7.15.2:::
haxx	libcurl	7.19.4	cpe:/a:haxx:libcurl:7.19.4:::
haxx	libcurl	7.21.7	cpe:/a:haxx:libcurl:7.21.7:::
haxx	libcurl	7.13.0	cpe:/a:haxx:libcurl:7.13.0:::
haxx	libcurl	7.21.5	cpe:/a:haxx:libcurl:7.21.5:::
haxx	libcurl	7.28.1	cpe:/a:haxx:libcurl:7.28.1:::
haxx	libcurl	7.16.4	cpe:/a:haxx:libcurl:7.16.4:::