Red Hat Security AdvisoryRHSA-2013:0250
elinks security update
Released 2013-02-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) elinks-0.11.1-8.el5_9, elinks-0.11.1-8.el5_9.i386, elinks-0.11.1-8.el5_9.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 6) elinks-0.12-0.21.pre5.el6_3
- Red Hat Enterprise Linux HPC Node (v. 6) elinks-0.12-0.21.pre5.el6_3
- Red Hat Enterprise Linux Server (v. 6) elinks-0.12-0.21.pre5.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) elinks-0.12-0.21.pre5.el6_3
Fixes 1 record
Priority LOW 27
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which all…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.0191 · Published 2013-01-03 · Fixed CWE-287
