NetSight
IP …
medium4.0

CVE-2014-0015

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent atta…

Impact

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.

Affected products

VendorProductAffected versions
HaxxLibcurl
Versions 7.10.6, 7.10.7, 7.10.8, 7.11.0, 7.11.1, 7.11.2
HaxxCurl
Versions 7.10.6, 7.10.7, 7.10.8, 7.11.0, 7.11.1, 7.11.2

Weakness classification

CWE-287

References