PT-2013-1240

Name of the Vulnerable Software and Affected Versions libcurl versions 7.21.4 through 7.33.0 curl versions prior to 7.34.0 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks, making it easier to spoof servers. This is due to the disabling of the CURLOPT SSL...

PT-2013-5064

Name of the Vulnerable Software and Affected Versions cURL and libcurl versions 7.18.0 through 7.32.0 Description The issue arises when cURL and libcurl, built with OpenSSL, have the digital signature verification disabled, which in turn disables the verification of the certificate CN and SAN nam...