curl vulnerability

2012-01-2400:00:00

ubuntu.com

6.4 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.7%

JSON

Releases

Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.10

Packages

curl - HTTP, HTTPS, and FTP client and client libraries

Details

Dan Fandrich discovered that curl incorrectly handled URLs containing
embedded or percent-encoded control characters. If a user or automated
system were tricked into processing a specially crafted URL, arbitrary
data could be injected.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchlibcurl3-nss< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchcurl< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl3< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl3-dbg< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl3-gnutls< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl3-udeb< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl4-gnutls-dev< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl4-nss-dev< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.10noarchlibcurl4-openssl-dev< 7.21.6-3ubuntu3.2UNKNOWN
Ubuntu11.04noarchlibcurl3-nss< 7.21.3-1ubuntu1.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	libcurl3-nss	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	curl	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl3	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl3-dbg	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl3-gnutls	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl3-udeb	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl4-gnutls-dev	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl4-nss-dev	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	libcurl4-openssl-dev	< 7.21.6-3ubuntu3.2	UNKNOWN
Ubuntu	11.04	noarch	libcurl3-nss	< 7.21.3-1ubuntu1.5	UNKNOWN