QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-0138

Back to search

CVE-2014-0138

Published: Apr 15, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.

VendorProductVersions

n/a

n/a

affected
n/a

References

57836
third-party-advisory
x_refsource_SECUNIA
DSA-2902
vendor-advisory
x_refsource_DEBIAN
59458
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2014:0530
vendor-advisory
x_refsource_SUSE
58615
third-party-advisory
x_refsource_SECUNIA
57968
third-party-advisory
x_refsource_SECUNIA
USN-2167-1
vendor-advisory
x_refsource_UBUNTU
57966
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now