Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-5034HistorySep 21, 2007 - 8:17 p.m.
CVE-2007-5034
2007-09-2120:17:00
Debian Security Bug Tracker
security-tracker.debian.org
8
0.009 Low
EPSS
Percentile
82.8%
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | elinks | < 0.11.1-1.5 | elinks_0.11.1-1.5_all.deb |
| Debian | 11 | all | elinks | < 0.11.1-1.5 | elinks_0.11.1-1.5_all.deb |
| Debian | 10 | all | elinks | < 0.11.1-1.5 | elinks_0.11.1-1.5_all.deb |
| Debian | 999 | all | elinks | < 0.11.1-1.5 | elinks_0.11.1-1.5_all.deb |
| Debian | 13 | all | elinks | < 0.11.1-1.5 | elinks_0.11.1-1.5_all.deb |
Related
redhat
redhat
(RHSA-2007:0933) Moderate: elinks security update
2007-10-03 00:00:00
nessus
nessus
Fedora Core 6 : elinks-0.11.3-1.fc6 (2007-710)
2007-10-09 00:00:00
Scientific Linux Security Update : elinks on SL5.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Fedora 7 : elinks-0.11.3-1.fc7 (2007-2224)
2007-11-06 00:00:00
openvas
openvas
Fedora Update for elinks FEDORA-2007-710
2009-02-27 00:00:00
Debian: Security Advisory (DSA-1380-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1380-1 (elinks)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2007-5034
2007-09-21 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:19:01
oraclelinux
oraclelinux
Moderate: elinks security update
2007-10-03 00:00:00
debian
debian
[SECURITY] [DSA 1380-1] New elinks packages fix information disclosure
2007-10-02 00:00:00
ubuntu
ubuntu
elinks vulnerability
2007-09-25 00:00:00
cvelist
cvelist
CVE-2007-5034
2007-09-21 20:00:00
prion
prion
Design/Logic Flaw
2007-09-21 20:17:00
securityvulns
securityvulns
elinks information leak
2007-10-04 00:00:00
[SECURITY] [DSA 1380-1] New elinks packages fix information disclosure
2007-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: elinks-0.11.3-1.fc7
2007-09-24 17:58:52
osv
osv
elinks - information disclosure
2007-10-02 00:00:00
cve
cve
CVE-2007-5034
2007-09-21 20:17:00
centos
centos
elinks security update
2007-10-03 16:19:25