CVE-2015-3148

CVSS 5.0 - MEDIUM

Description

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

Affected Products

50 of 159

Vendor	Product	Version
fedoraproject	fedora	`21`
fedoraproject	fedora	`22`
canonical	ubuntu_linux	`12.04`
canonical	ubuntu_linux	`14.04`
canonical	ubuntu_linux	`14.10`
canonical	ubuntu_linux	`15.04`
debian	debian_linux	`7.0`
apple	mac_os_x	`10.10.0`
apple	mac_os_x	`10.10.1`
apple	mac_os_x	`10.10.2`
apple	mac_os_x	`10.10.3`
apple	mac_os_x	`10.10.4`
haxx	libcurl	`7.10.6`
haxx	libcurl	`7.10.7`
haxx	libcurl	`7.10.8`
haxx	libcurl	`7.11.0`
haxx	libcurl	`7.11.1`
haxx	libcurl	`7.11.2`
haxx	libcurl	`7.12.0`
haxx	libcurl	`7.12.1`
haxx	libcurl	`7.12.2`
haxx	libcurl	`7.12.3`
haxx	libcurl	`7.13.0`
haxx	libcurl	`7.13.1`
haxx	libcurl	`7.13.2`
haxx	libcurl	`7.14.0`
haxx	libcurl	`7.14.1`
haxx	libcurl	`7.15.0`
haxx	libcurl	`7.15.1`
haxx	libcurl	`7.15.2`
haxx	libcurl	`7.15.3`
haxx	libcurl	`7.15.4`
haxx	libcurl	`7.15.5`
haxx	libcurl	`7.16.0`
haxx	libcurl	`7.16.1`
haxx	libcurl	`7.16.2`
haxx	libcurl	`7.16.3`
haxx	libcurl	`7.16.4`
haxx	libcurl	`7.17.0`
haxx	libcurl	`7.17.1`
haxx	libcurl	`7.18.0`
haxx	libcurl	`7.18.1`
haxx	libcurl	`7.18.2`
haxx	libcurl	`7.19.0`
haxx	libcurl	`7.19.1`
haxx	libcurl	`7.19.2`
haxx	libcurl	`7.19.3`
haxx	libcurl	`7.19.4`
haxx	libcurl	`7.19.5`
haxx	libcurl	`7.19.6`