DEBIAN-CVE-2003-1605

curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server...