Debian Security Advisory DSA 1738-1 (curl)

The remote host is missing an update to curl announced via advisory DSA 1738-1. OpenVAS Vulnerability Test $Id: deb17381.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1738-1 curl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RHEL 2.1 / 3 / 4 / 5 : curl (RHSA-2009:0341)

Updated curl packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers,...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Gentoo Security Advisory GLSA 200903-21 (curl)

The remote host is missing updates announced in advisory GLSA 200903-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[SECURITY] [DSA 1738-1] New curl packages fix arbitrary file access

-------------------------------------------------------------------------- Debian Security Advisory DSA-1738-1 [email protected] http://www.debian.org/security/ Nico Golde March 11th, 2009 http://www.debian.org/security/faq -...

Fedora Core 9 FEDORA-2009-2265 (curl)

The remote host is missing an update to curl announced via advisory FEDORA-2009-2265. OpenVAS Vulnerability Test $Id: fcore20092265.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2265 curl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 9 FEDORA-2009-2265 (curl)

The remote host is missing an update to curl announced via advisory FEDORA-2009-2265. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Ports: curl

The remote host is missing an update to the system as announced in the referenced advisory. VID 5d433534-f41c-402e-ade5-e0a2259a7cb6 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5d433534-f41c-402e-ade5-e0a2259a7cb6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-2247 (curl)

The remote host is missing an update to curl announced via advisory FEDORA-2009-2247. OpenVAS Vulnerability Test $Id: fcore20092247.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2247 curl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Ubuntu USN-726-1 (curl)

The remote host is missing an update to curl announced via advisory USN-726-1. OpenVAS Vulnerability Test $Id: ubuntu7261.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7261.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-726-1 curl Authors: Thomas Reinke...

Fedora Core 10 FEDORA-2009-2247 (curl)

The remote host is missing an update to curl announced via advisory FEDORA-2009-2247. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 9 : curl-7.19.4-1.fc9 (2009-2265)

Update to curl-7.19.4 fixes CVE-2009-0037. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

CVE-2009-0037

The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPTFOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to 1 trigger arbitrary requests to intranet servers, 2 read or overwrite arbitrary files via a redirect to a file:...

CVE-2009-0037

The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPTFOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to 1 trigger arbitrary requests to intranet servers, 2 read or overwrite arbitrary files via a redirect to a file:...

CVE-2009-0037

CVE-2009-0037 affects curl/libcurl 5.11–7.19.3 when CURLOPT_FOLLOWLOCATION is enabled. The redirect code accepts arbitrary Location values, allowing: (1) triggering requests to intranet servers, (2) reading/writing files via file: URLs, and (3) executing commands via scp: URLs. Affected platforms...

Security fix for the ALT Linux 6 package curl version 7.19.4-alt1

March 3, 2009 Anton Farygin 7.19.4-alt1 - new version CVE-2009-0037...

Security fix for the ALT Linux 8 package curl version 7.19.4-alt1

March 3, 2009 Anton Farygin 7.19.4-alt1 - new version CVE-2009-0037...

CVE-2009-0037

creationtimestamp| type| source ---|---|--- 2009-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32834...

openSUSE 10 Security Update : curl (curl-6004)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update curl-6004. The text description o...

CVE-2008-0037

X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server...