Design/Logic Flaw

🗓️ 29 Jan 2016 20:59:00Reported by PRIOn knowledge baseType

ConnectionExists function in libcurl does not re-use NTLM-authenticated proxy connections, allowing remote attackers to authenticate as other users

Reporter	Title	Published	Views	Family All 220
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Open SSL, OpenSSH and curl affect the Integrated Management Module II (IMM2)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Libcurl affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter (CVE-2016-0755)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter is affected by several cURL potential vulnerabilities (CVE-2014-0015, CVE-2014-0139, CVE-2014-0138, CVE-2014-2522)	31 Jan 201901:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-138, CVE-2014-0139)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open SSL, OpenSSH and curl affect the Integrated Management Module II (IMM2)	31 Jan 201901:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by a curl vulnerability (CVE-2016-0755)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Libcurl affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2016-0755)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities affect IBM's Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Chassis Management Module (CMM) (CVE-2013-4545, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139, CVE-2013-2174)	31 Jan 201901:55	–	ibm

Source	Link
ubuntu	www.ubuntu.com/usn/USN-2882-1
debian	www.debian.org/security/2016/dsa-3455
curl	www.curl.haxx.se/docs/adv_20160127A.html
support	www.support.apple.com/HT207170
lists	www.lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
securityfocus	www.securityfocus.com/bid/82307
lists	www.lists.opensuse.org/opensuse-updates/2016-02/msg00031.html
slackware	www.slackware.com/security/viewer.php
lists	www.lists.opensuse.org/opensuse-updates/2016-02/msg00047.html
packetstormsecurity	www.packetstormsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html

17 Oct 2018 01:29Current

7High risk

Vulners AI Score7

EPSS0.01266