The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2014-04-15T14:00:00
Updated: 2024-08-06T09:05:38.827Z
Reserved: 2013-12-03T00:00:00
Link: CVE-2014-0138
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-04-15T14:55:04.107
Modified: 2024-11-21T02:01:27.557
Link: CVE-2014-0138
Redhat