Back to search
CVE-2016-0755
Published: Jan 29, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2016-57bebab3b6
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2016:0360
vendor-advisory
x_refsource_SUSE
FEDORA-2016-3fa315a5dd
vendor-advisory
x_refsource_FEDORA
APPLE-SA-2016-09-20
vendor-advisory
x_refsource_APPLE
http://curl.haxx.se/docs/adv_20160127A.html
x_refsource_CONFIRM
SSA:2016-039-01
vendor-advisory
x_refsource_SLACKWARE
DSA-3455
vendor-advisory
x_refsource_DEBIAN
openSUSE-SU-2016:0376
vendor-advisory
x_refsource_SUSE
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
x_refsource_CONFIRM
82307
vdb-entry
x_refsource_BID
https://support.apple.com/HT207170
x_refsource_CONFIRM
openSUSE-SU-2016:0373
vendor-advisory
x_refsource_SUSE
1034882
vdb-entry
x_refsource_SECTRACK
FEDORA-2016-5a141de5d9
vendor-advisory
x_refsource_FEDORA
USN-2882-1
vendor-advisory
x_refsource_UBUNTU
GLSA-201701-47
vendor-advisory
x_refsource_GENTOO
FEDORA-2016-55137a3adb
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now