Computer Security
[EN] securityvulns.ru no-pyccku


cURL security vulnerabilitiies
updated since 01.02.2014
Published:01.11.2015
Source:
SecurityVulns ID:13544
Type:client
Threat Level:
7/10
Description:Request may be sent via wrong connection if NTLM authentication is used. Information disclosure, DoS.
Affected:CURL : libcurl 7.41
 CURL : cURL 7.35
CVE:CVE-2015-3237 (The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.)
 CVE-2015-3236 (cURL and libcurl 7.40.0 through 7.42.1 sends the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.)
 CVE-2015-3153 (The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.)
 CVE-2015-3148 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.)
 CVE-2015-3145 (The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.)
 CVE-2015-3144 (The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80.")
 CVE-2015-3143 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.)
 CVE-2014-0015 (cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.)
Original documentdocumentUBUNTU, [USN-2591-1] curl vulnerabilities (05.05.2015)
 documentMANDRIVA, [ MDVSA-2015:220 ] curl (04.05.2015)
 documentDEBIAN, [SECURITY] [DSA 2849-1] curl security update (01.02.2014)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod