curl vulnerability

2007-07-1700:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Details

It was discovered that the GnuTLS certificate verification methods
implemented in Curl did not check for expiration and activation dates.
When performing validations, tools using libcurl3-gnutls would
incorrectly allow connections to sites using expired certificates.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibcurl3-gnutls< 7.15.5-1ubuntu2.1UNKNOWN
Ubuntu6.10noarchlibcurl3-gnutls< 7.15.4-1ubuntu2.2UNKNOWN
Ubuntu6.06noarchlibcurl3-gnutls< 7.15.1-1ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	libcurl3-gnutls	< 7.15.5-1ubuntu2.1	UNKNOWN
Ubuntu	6.10	noarch	libcurl3-gnutls	< 7.15.4-1ubuntu2.2	UNKNOWN
Ubuntu	6.06	noarch	libcurl3-gnutls	< 7.15.1-1ubuntu2.1	UNKNOWN