Lucene search
Ubuntu.comUB:CVE-2012-4545HistoryJan 03, 2013 - 12:00 a.m.
CVE-2012-4545
2013-01-0300:00:00
ubuntu.com
ubuntu.com
5
0.008 Low
EPSS
Percentile
81.6%
The http_negotiate_create_context function in
protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using
HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials
through GSSAPI, which allows remote servers to authenticate as the client
via the delegated credentials.
Related
securityvulns
securityvulns
[SECURITY] [DSA 2592-1] elinks security update
2013-01-02 00:00:00
elinks authentication relaing
2013-01-02 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 08:56:04
openvas
openvas
CentOS Update for elinks CESA-2013:0250 centos5
2013-02-15 00:00:00
Debian: Security Advisory (DSA-2592-1)
2013-09-18 00:00:00
Fedora Update for elinks FEDORA-2013-0207
2013-01-21 00:00:00
oraclelinux
oraclelinux
elinks security update
2013-02-11 00:00:00
nessus
nessus
CentOS 5 / 6 : elinks (CESA-2013:0250)
2013-02-12 00:00:00
Oracle Linux 5 / 6 : elinks (ELSA-2013-0250)
2013-07-12 00:00:00
redhat
redhat
(RHSA-2013:0250) Moderate: elinks security update
2013-02-11 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: elinks-0.12-0.29.pre5.fc17
2013-01-14 04:19:16
[SECURITY] Fedora 18 Update: elinks-0.12-0.32.pre5.fc18
2013-01-14 04:05:30
[SECURITY] Fedora 18 Update: elinks-0.12-0.33.pre6.fc18
2013-10-14 17:20:40
centos
centos
elinks security update
2013-02-11 18:29:01
cvelist
cvelist
CVE-2012-4545
2013-01-03 01:00:00
cve
cve
CVE-2012-4545
2013-01-03 01:55:00
prion
prion
Authentication flaw
2013-01-03 01:55:00
debian
debian
[SECURITY] [DSA 2592-1] elinks security update
2012-12-28 03:37:46
debiancve
debiancve
CVE-2012-4545
2013-01-03 01:55:00