curl vulnerabilities

2014-09-15T00:00:00
ID USN-2346-1
Type ubuntu
Reporter Ubuntu
Modified 2014-09-15T00:00:00

Description

Tim Ruehsen discovered that curl incorrectly handled partial literal IP addresses. This could lead to the disclosure of cookies to the wrong site, and malicious sites being able to set cookies for others. (CVE-2014-3613)

Tim Ruehsen discovered that curl incorrectly allowed cookies to be set for Top Level Domains (TLDs). This could allow a malicious site to set a cookie that gets sent to other sites. (CVE-2014-3620)