cURL/libcURL CVE-2015-3153 Information Disclosure Vulnerability
BID:74408
Info
cURL/libcURL CVE-2015-3153 Information Disclosure Vulnerability
| Bugtraq ID: | 74408 |
| Class: | Design Error |
| CVE: |
CVE-2015-3153 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2015 12:00AM |
| Updated: | Jul 06 2016 02:27PM |
| Credit: | Martin Prpic |
| Vulnerable: |
Oracle Enterprise Manager Ops Center 11.1 McAfee Agent 4.00.0200 McAfee Agent 4.0.0.1421 McAfee Agent 4.0 IBM Rational ClearCase 7.0.1 IBM Rational ClearCase 7.1.2.2 IBM Rational ClearCase 7.1.1.5 IBM Rational ClearCase 7.1.1.4 IBM Rational ClearCase 7.1.0.1 IBM Rational ClearCase 7.0.1.4 IBM Rational ClearCase 7.0.1.2 IBM Rational ClearCase 7.0.0.5 IBM Rational ClearCase 7.0.0.4 IBM Rational ClearCase 7.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
cURL/libcURL CVE-2015-3153 Information Disclosure Vulnerability
cURL/libcURL is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Versions prior to cURL/libcURL 7.42.1 are vulnerable.
cURL/libcURL is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Versions prior to cURL/libcURL 7.42.1 are vulnerable.
Exploit / POC
cURL/libcURL CVE-2015-3153 Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
cURL/libcURL CVE-2015-3153 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
cURL/libcURL CVE-2015-3153 Information Disclosure Vulnerability
References:
References:
- cURL Home Page (cURL)
- curl: sensitive HTTP server headers also sent to proxies (Red Hat)
- 2016-04 Security Bulletin: Junos: Multiple vulnerabilities in cURL and libcurl (Juniper)
- APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 (Apple)
- IBM Advisory swg21903010 (IBM)
- IBM Advisory: swg21967448 - NetInsight is impacted by multiple vulnerabilities i (IBM)
- Intel Security - Security Bulletin: McAfee Agent patch fixes three Libcurl vulne (McAfee)
- Oracle Critical Patch Update Advisory - January 2016 (Oracle)
- Oracle Solaris Third Party Bulletin - January 2016 (Oracle)
- Security Bulletin: Multiple Open Source cURL libcurl Vulnerabilities (CVE-2015-3 (IBM)
- Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Manag (IBM)
- swg21967789 : Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-201 (IBM)