elinks vulnerability

2007-09-2500:00:00

ubuntu.com

5.8 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.9%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

elinks -

Details

Kalle Olavi Niemitalo discovered that if elinks makes a POST request
to an HTTPS URL through a proxy, information may be sent in clear-text
between elinks and the proxy. Attackers with access to the network
could steal sensitive information (such as passwords).

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchelinks< 0.11.1-1.2ubuntu2.2UNKNOWN
Ubuntu7.04noarchelinks-lite< 0.11.1-1.2ubuntu2.2UNKNOWN
Ubuntu6.10noarchelinks< 0.11.1-1ubuntu2.2UNKNOWN
Ubuntu6.10noarchelinks-lite< 0.11.1-1ubuntu2.2UNKNOWN
Ubuntu6.06noarchelinks< 0.10.6-1ubuntu3.2UNKNOWN
Ubuntu6.06noarchelinks-lite< 0.10.6-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	elinks	< 0.11.1-1.2ubuntu2.2	UNKNOWN
Ubuntu	7.04	noarch	elinks-lite	< 0.11.1-1.2ubuntu2.2	UNKNOWN
Ubuntu	6.10	noarch	elinks	< 0.11.1-1ubuntu2.2	UNKNOWN
Ubuntu	6.10	noarch	elinks-lite	< 0.11.1-1ubuntu2.2	UNKNOWN
Ubuntu	6.06	noarch	elinks	< 0.10.6-1ubuntu3.2	UNKNOWN
Ubuntu	6.06	noarch	elinks-lite	< 0.10.6-1ubuntu3.2	UNKNOWN