DEBIAN-CVE-2011-2192

The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...

CVE-2011-2192

The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...

CVE-2011-2192

The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...

Deserialization of untrusted data

The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...

CVE-2011-2192

The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...

CVE-2011-2192

The Curlinputnegotiate function in httpnegotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests...

CVE-2011-2192

CVE-2011-2192 affects libcurl 7.10.6–7.21.6 (used by curl and related products): the Curl_input_negotiate function unconditionally delegates GSSAPI credentials during authentication, enabling a remote server to impersonate the client via GSSAPI. Evidence in connected docs shows MiracleLinux advis...

CentOS 4 / 5 : curl (CESA-2011:0918)

Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

RHEL 4 / 5 / 6 : curl (RHSA-2011:0918)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0918 advisory. cURL provides the libcurl library and a command line tool for downloading files from servers using various protocols, including HTTP, FTP, an...

Moderate: Red Hat Security Advisory: curl security update

Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

curl security update

7.19.7-26.el61.1 - do not delegate GSSAPI credentials CVE-2011-2192...

Fedora 14 : curl-7.21.0-8.fc14 (2011-8640)

do not delegate GSSAPI credentials CVE-2011-2192 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DSA-2271-1 : curl - improper delegation of client credentials

Richard Silverman discovered that when doing GSSAPI authentication, libcurl unconditionally performs credential delegation. This hands the server a copy of the client's security credentials, allowing the server to impersonate the client to any other using the same GSSAPI mechanism. This is...

[SECURITY] [DSA 2271-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2271-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...

DSA-2271-1 curl - improper delegation of client credentials

Bulletin has no description...

libcurl GSSAPI security vulnerability

Client's security credentials are unconditionally delegated...

[USN-1158-1] curl vulnerabilities

========================================================================== Ubuntu Security Notice USN-1158-1 June 24, 2011 curl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

USN-1158-1: curl vulnerabilities

Richard Silverman discovered that when doing GSSAPI authentication, libcurl unconditionally performs credential delegation, handing the server a copy of the client's security credential. CVE-2011-2192 Wesley Miaw discovered that when zlib is enabled, libcurl does not properly restrict the amount ...

Ubuntu: Security Advisory (USN-1158-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...