cURL Proxy Authentication Header Information Leakage Vulnerability
BID:8432
CVE-2003-1605 |Info
cURL Proxy Authentication Header Information Leakage Vulnerability
| Bugtraq ID: | 8432 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 03 2003 12:00AM |
| Updated: | Aug 03 2003 12:00AM |
| Credit: | This issue was reported by the vendor. |
| Vulnerable: |
Daniel Stenberg curl 7.10.6 Daniel Stenberg curl 7.10.5 Daniel Stenberg curl 7.10.4 Daniel Stenberg curl 7.10.3 Daniel Stenberg curl 7.10.2 Daniel Stenberg curl 7.10.1 Daniel Stenberg curl 7.10 Daniel Stenberg curl 7.9.8 Daniel Stenberg curl 7.9.7 Daniel Stenberg curl 7.9.6 Daniel Stenberg curl 7.9.5 Daniel Stenberg curl 7.9.4 Daniel Stenberg curl 7.9.3 Daniel Stenberg curl 7.9.2 Daniel Stenberg curl 7.9.1 Daniel Stenberg curl 7.9 Daniel Stenberg curl 7.8.1 Daniel Stenberg curl 7.8 Daniel Stenberg curl 7.7.3 Daniel Stenberg curl 7.7.2 Daniel Stenberg curl 7.7.1 Daniel Stenberg curl 7.7 Daniel Stenberg curl 7.6.1 Daniel Stenberg curl 7.6 Daniel Stenberg curl 7.5.2 Daniel Stenberg curl 7.5.1 Daniel Stenberg curl 7.5 Daniel Stenberg curl 7.4.2 Daniel Stenberg curl 7.4.1 Daniel Stenberg curl 7.4 Daniel Stenberg curl 7.3 Daniel Stenberg curl 7.2.1 Daniel Stenberg curl 7.2 Daniel Stenberg curl 7.1.1 Daniel Stenberg curl 7.1 |
| Not Vulnerable: |
Daniel Stenberg curl 7.10.7 |
Discussion
cURL Proxy Authentication Header Information Leakage Vulnerability
cURL is prone to an issue that could cause proxy authentication header information to be leaked inadvertently to remote hosts. This occurs when proxy authentication is used via a request using the CONNECT method. This could expose credentials.
cURL is prone to an issue that could cause proxy authentication header information to be leaked inadvertently to remote hosts. This occurs when proxy authentication is used via a request using the CONNECT method. This could expose credentials.
Exploit / POC
cURL Proxy Authentication Header Information Leakage Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
cURL Proxy Authentication Header Information Leakage Vulnerability
Solution:
This issue was addressed in cURL 7.10.7. Users are advised to upgrade.
Daniel Stenberg curl 7.1
Daniel Stenberg curl 7.1.1
Daniel Stenberg curl 7.10.1
Daniel Stenberg curl 7.10.3
Daniel Stenberg curl 7.10.4
Daniel Stenberg curl 7.10.5
Daniel Stenberg curl 7.10.6
Daniel Stenberg curl 7.2
Daniel Stenberg curl 7.2.1
Daniel Stenberg curl 7.3
Daniel Stenberg curl 7.4
Daniel Stenberg curl 7.4.1
Solution:
This issue was addressed in cURL 7.10.7. Users are advised to upgrade.
Daniel Stenberg curl 7.1
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.1.1
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.10.1
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.10.3
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.10.4
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.10.5
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.10.6
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.2
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.2.1
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.3
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.4
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html
Daniel Stenberg curl 7.4.1
-
Daniel Stenberg cURL 7.10.7
http://curl.haxx.se/download.html