Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2192HistoryJul 07, 2011 - 9:55 p.m.
CVE-2011-2192
2011-07-0721:55:00
Debian Security Bug Tracker
security-tracker.debian.org
13
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.6%
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | curl | < 7.21.6-2 | curl_7.21.6-2_all.deb |
| Debian | 11 | all | curl | < 7.21.6-2 | curl_7.21.6-2_all.deb |
| Debian | 10 | all | curl | < 7.21.6-2 | curl_7.21.6-2_all.deb |
| Debian | 999 | all | curl | < 7.21.6-2 | curl_7.21.6-2_all.deb |
| Debian | 13 | all | curl | < 7.21.6-2 | curl_7.21.6-2_all.deb |
Related
openvas
openvas
Mandriva Update for curl MDVSA-2011:116 (curl)
2011-07-27 00:00:00
RedHat Update for curl RHSA-2011:0918-01
2011-07-08 00:00:00
Fedora Update for curl FEDORA-2011-8586
2011-07-12 00:00:00
nessus
nessus
RHEL 4 / 5 / 6 : curl (RHSA-2011:0918)
2011-07-06 00:00:00
cURL/libcURL GSS/Negotiate Feature Spoofing Security Vulnerability
2013-07-03 00:00:00
Mandriva Linux Security Advisory : curl (MDVSA-2011:116)
2011-07-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package curl version 7.21.7-alt1
2011-06-27 00:00:00
Security fix for the ALT Linux 8 package curl version 7.21.7-alt1
2011-06-27 00:00:00
redhat
redhat
(RHSA-2011:0918) Moderate: curl security update
2011-07-05 00:00:00
(RHSA-2011:1090) Moderate: rhev-hypervisor security and bug fix update
2011-07-27 00:00:00
centos
centos
curl security update
2011-07-06 01:31:31
ubuntucve
ubuntucve
CVE-2011-2192
2011-06-23 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: curl-7.21.3-8.fc15
2011-06-25 19:58:00
[SECURITY] Fedora 14 Update: curl-7.21.0-8.fc14
2011-07-04 18:52:22
[SECURITY] Fedora 15 Update: curl-7.21.3-13.fc15
2012-02-11 22:04:59
oraclelinux
oraclelinux
curl security update
2011-07-05 00:00:00
prion
prion
Deserialization of untrusted data
2011-07-07 21:55:00
securityvulns
securityvulns
libcurl GSSAPI security vulnerability
2011-06-28 00:00:00
[USN-1158-1] curl vulnerabilities
2011-06-28 00:00:00
Apple OS X multiple security vulnerabilities
2012-02-03 00:00:00
cve
cve
CVE-2011-2192
2011-07-07 21:55:00
freebsd
freebsd
cURL -- inappropriate GSSAPI delegation
2011-06-23 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 01:04:31
debian
debian
[SECURITY] [DSA 2271-1] curl security update
2011-07-02 07:49:58
[SECURITY] [DSA 2271-1] curl security update
2011-07-02 07:49:58
ubuntu
ubuntu
curl vulnerabilities
2011-06-24 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2012-03-06 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.6%
Related for DEBIANCVE:CVE-2011-2192