Red Hat Security AdvisoryRHSA-2009:1209
curl security update
Released 2009-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 curl-7.10.6-10.rhel3, curl-7.10.6-10.rhel3.i386, curl-devel-7.10.6-10.rhel3 +1
- Red Hat Enterprise Linux (v. 5 server) curl-7.15.5-2.1.el5_3.5, curl-7.15.5-2.1.el5_3.5.i386, curl-7.15.5-2.1.el5_3.5.ia64 +5
- Red Hat Enterprise Linux AS version 3 curl-7.10.6-10.rhel3, curl-7.10.6-10.rhel3.i386, curl-7.10.6-10.rhel3.ia64 +5
- Red Hat Enterprise Linux AS version 4 curl-7.12.1-11.1.el4_8.1, curl-7.12.1-11.1.el4_8.1.i386, curl-7.12.1-11.1.el4_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) curl-7.15.5-2.1.el5_3.5, curl-7.15.5-2.1.el5_3.5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) curl-7.15.5-2.1.el5_3.5, curl-devel-7.15.5-2.1.el5_3.5, curl-devel-7.15.5-2.1.el5_3.5.i386
- Red Hat Enterprise Linux Desktop version 4 curl-7.12.1-11.1.el4_8.1, curl-7.12.1-11.1.el4_8.1.i386, curl-devel-7.12.1-11.1.el4_8.1 +1
- Red Hat Enterprise Linux ES version 3 curl-7.10.6-10.rhel3, curl-7.10.6-10.rhel3.i386, curl-7.10.6-10.rhel3.ia64 +3
- Red Hat Enterprise Linux ES version 4 curl-7.12.1-11.1.el4_8.1, curl-7.12.1-11.1.el4_8.1.i386, curl-7.12.1-11.1.el4_8.1.ia64 +3
- Red Hat Enterprise Linux WS version 3 curl-7.10.6-10.rhel3, curl-7.10.6-10.rhel3.i386, curl-7.10.6-10.rhel3.ia64 +3
- Red Hat Enterprise Linux WS version 4 curl-7.12.1-11.1.el4_8.1, curl-7.12.1-11.1.el4_8.1.i386, curl-7.12.1-11.1.el4_8.1.ia64 +3
Fixes 1 record
Priority LOW 39
lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-t…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03461 · Published 2009-08-14 · Fixed CWE-310
