Red Hat Security AdvisoryRHSA-2007:0933
elinks security update
Released 2007-10-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) elinks-0.11.1-5.1.0.1.el5, elinks-0.11.1-5.1.0.1.el5.i386, elinks-0.11.1-5.1.0.1.el5.ia64 +1
- Red Hat Enterprise Linux AS version 4 elinks-0.9.2-3.3.5.2, elinks-0.9.2-3.3.5.2.i386, elinks-0.9.2-3.3.5.2.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) elinks-0.11.1-5.1.0.1.el5, elinks-0.11.1-5.1.0.1.el5.i386
- Red Hat Enterprise Linux Desktop version 4 elinks-0.9.2-3.3.5.2, elinks-0.9.2-3.3.5.2.i386
- Red Hat Enterprise Linux ES version 4 elinks-0.9.2-3.3.5.2, elinks-0.9.2-3.3.5.2.i386, elinks-0.9.2-3.3.5.2.ia64
- Red Hat Enterprise Linux WS version 4 elinks-0.9.2-3.3.5.2, elinks-0.9.2-3.3.5.2.i386, elinks-0.9.2-3.3.5.2.ia64
Fixes 1 record
Priority LOW 25
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02599 · Published 2007-09-21 · Fixed CWE-200
