CVE

Id
28391  
CVE No.
CVE-2007-5034  
Status
Candidate  
Description
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.  
Phase
Assigned (20070921)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295019 28391 CVE-2007-5034 BUGTRAQ:20071005 rPSA-2007-0209-1 elinks  View
295020 28391 CVE-2007-5034 URL:http://www.securityfocus.com/archive/1/archive/1/481606/100/0/threaded  View
295021 28391 CVE-2007-5034 CONFIRM:http://bugzilla.elinks.cz/show_bug.cgi?id=937  View
295022 28391 CVE-2007-5034 CONFIRM:https://bugs.launchpad.net/ubuntu/+source/elinks/+bug/141018  View
295023 28391 CVE-2007-5034 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=297981  View
295024 28391 CVE-2007-5034 DEBIAN:DSA-1380  View
295025 28391 CVE-2007-5034 URL:http://www.debian.org/security/2007/dsa-1380  View
295026 28391 CVE-2007-5034 FEDORA:FEDORA-2007-2224  View
295027 28391 CVE-2007-5034 URL:https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00335.html  View
295028 28391 CVE-2007-5034 FEDORA:FEDORA-2007-710  View
295029 28391 CVE-2007-5034 URL:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00079.html  View
295030 28391 CVE-2007-5034 REDHAT:RHSA-2007:0933  View
295031 28391 CVE-2007-5034 URL:http://www.redhat.com/support/errata/RHSA-2007-0933.html  View
295032 28391 CVE-2007-5034 UBUNTU:USN-519-1  View
295033 28391 CVE-2007-5034 URL:http://www.ubuntu.com/usn/usn-519-1  View
295034 28391 CVE-2007-5034 BID:25799  View
295035 28391 CVE-2007-5034 URL:http://www.securityfocus.com/bid/25799  View
295036 28391 CVE-2007-5034 OVAL:oval:org.mitre.oval:def:10335  View
295037 28391 CVE-2007-5034 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10335  View
295038 28391 CVE-2007-5034 VUPEN:ADV-2007-3278  View
295039 28391 CVE-2007-5034 URL:http://www.vupen.com/english/advisories/2007/3278  View
295040 28391 CVE-2007-5034 SECTRACK:1018764  View
295041 28391 CVE-2007-5034 URL:http://www.securitytracker.com/id?1018764  View
295042 28391 CVE-2007-5034 SECUNIA:26936  View
295043 28391 CVE-2007-5034 URL:http://secunia.com/advisories/26936  View
295044 28391 CVE-2007-5034 SECUNIA:26956  View
295045 28391 CVE-2007-5034 URL:http://secunia.com/advisories/26956  View
295046 28391 CVE-2007-5034 SECUNIA:26949  View
295047 28391 CVE-2007-5034 URL:http://secunia.com/advisories/26949  View
295048 28391 CVE-2007-5034 SECUNIA:27062  View
295049 28391 CVE-2007-5034 URL:http://secunia.com/advisories/27062  View
295050 28391 CVE-2007-5034 SECUNIA:27125  View
295051 28391 CVE-2007-5034 URL:http://secunia.com/advisories/27125  View
295052 28391 CVE-2007-5034 SECUNIA:27132  View
295053 28391 CVE-2007-5034 URL:http://secunia.com/advisories/27132  View
295054 28391 CVE-2007-5034 SECUNIA:27038  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53978 JVNDB-2007-002670 AirDefense Airsensor M520 におけるバッファオーバーフローの脆弱性 AirDefense Airsensor M520 には、"ファイルフィルタ" に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2007-5036 28391 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002670.html  View