NetSight
IP …
medium5.0

CVE-2015-3153

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy…

Impact

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

Affected products

VendorProductAffected versions
OracleEnterprise Manager Ops Center
through 12.1.3
Versions 12.2.0, 12.2.1, 12.3.0
HaxxCurl
through 7.42.0
HaxxLibcurl
through 7.42.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10, 15.1
AppleMac Os X
Version 10.10.4
DebianDebian Linux
Version 8.0

Weakness classification

CWE-200

References