Red Hat Security AdvisoryRHSA-2013:0771
curl security update
Released 2013-04-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) curl-7.15.5-16.el5_9, curl-7.15.5-16.el5_9.i386, curl-7.15.5-16.el5_9.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) curl-7.19.7-36.el6_4, libcurl-7.19.7-36.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) curl-7.19.7-36.el6_4, libcurl-devel-7.19.7-36.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) curl-7.19.7-36.el6_4, libcurl-7.19.7-36.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) curl-7.19.7-36.el6_4, libcurl-devel-7.19.7-36.el6_4
- Red Hat Enterprise Linux Server (v. 6) curl-7.19.7-36.el6_4, libcurl-7.19.7-36.el6_4, libcurl-7.19.7-36.el6_4.ppc +2
- Red Hat Enterprise Linux Workstation (v. 6) curl-7.19.7-36.el6_4, libcurl-7.19.7-36.el6_4, libcurl-devel-7.19.7-36.el6_4
Fixes 1 record
Priority LOW 30
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a U…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04336 · Published 2013-04-29 · Fixed CWE-200
