Lucene search

K
nessusTenable801394.PRM
HistoryJul 05, 2013 - 12:00 a.m.

cURL/libcURL 'tailmatch()' Function Information Disclosure Vulnerability

2013-07-0500:00:00
Tenable
www.tenable.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.008

Percentile

81.2%

A flaw was found in the way libcurl matched domains associated with cookies. This could lead to cURL sending the wrong cookie if only part of the domain name matched the domain associated with the cookie, disclosing the cookie to unrelated hosts. (CVE-2013-1944)

Affected versions prior to 7.30.0 are vulnerable.

Binary data 801394.prm

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.008

Percentile

81.2%