779 matches found
Mandriva Update for curl MDVSA-2011:116 (curl)
Check for the Version of curl OpenVAS Vulnerability Test Mandriva Update for curl MDVSA-2011:116 curl Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Mandriva Linux Security Advisory : curl (MDVSA-2011:116)
A vulnerability was discovered and corrected in curl : The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients vi...
Fedora 15 : krb5-appl-1.0.1-7.fc15 (2011-9080)
This update corrects a potential failure to properly set the effective group ID in the GSSAPI-capable FTP server MITKRB5-SA-2011-005, CVE-2011-1526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
PuTTY v.0.61 New Version released After 4 years
PuTTY v.0.61 New Version released After 4 years After four Years, Putty's New version finally Released today.Here are the PuTTY files themselves: PuTTY the Telnet and SSH client itself PSCP an SCP client, i.e. command-line secure file copy PSFTP an SFTP client, i.e. general file transfer sessions...
RedHat Update for curl RHSA-2011:0918-01
Check for the Version of curl OpenVAS Vulnerability Test RedHat Update for curl RHSA-2011:0918-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
DEBIAN-CVE-2011-2192
The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...
CVE-2011-2192
The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...
CVE-2011-2192
The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...
Deserialization of untrusted data
The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...
CVE-2011-2192
The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...
CVE-2011-2192
The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...
CVE-2011-2192
CVE-2011-2192 affects libcurl 7.10.6–7.21.6 (used by curl and related products): the Curl_input_negotiate function unconditionally delegates GSSAPI credentials during authentication, enabling a remote server to impersonate the client via GSSAPI. Evidence in connected docs shows MiracleLinux advis...
CentOS 4 / 5 : curl (CESA-2011:0918)
Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
RHEL 4 / 5 / 6 : curl (RHSA-2011:0918)
The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0918 advisory. cURL provides the libcurl library and a command line tool for downloading files from servers using various protocols, including HTTP, FTP, an...
Moderate: Red Hat Security Advisory: curl security update
Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
curl security update
7.19.7-26.el61.1 - do not delegate GSSAPI credentials CVE-2011-2192...
Fedora 14 : curl-7.21.0-8.fc14 (2011-8640)
do not delegate GSSAPI credentials CVE-2011-2192 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Debian DSA-2271-1 : curl - improper delegation of client credentials
Richard Silverman discovered that when doing GSSAPI authentication, libcurl unconditionally performs credential delegation. This hands the server a copy of the client's security credentials, allowing the server to impersonate the client to any other using the same GSSAPI mechanism. This is...
[SECURITY] [DSA 2271-1] curl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2271-1] curl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...