CVE

Id
70909  
CVE No.
CVE-2014-3613  
Status
Candidate  
Description
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675460 70909 CVE-2014-3613 CONFIRM:http://curl.haxx.se/docs/adv_20140910A.html  View
675461 70909 CVE-2014-3613 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
675462 70909 CVE-2014-3613 CONFIRM:https://support.apple.com/kb/HT205031  View
675463 70909 CVE-2014-3613 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
675464 70909 CVE-2014-3613 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743  View
675465 70909 CVE-2014-3613 APPLE:APPLE-SA-2015-08-13-2  View
675466 70909 CVE-2014-3613 URL:http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html  View
675467 70909 CVE-2014-3613 DEBIAN:DSA-3022  View
675468 70909 CVE-2014-3613 URL:http://www.debian.org/security/2014/dsa-3022  View
675469 70909 CVE-2014-3613 SUSE:openSUSE-SU-2014:1139  View
675470 70909 CVE-2014-3613 URL:http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00024.html  View
675471 70909 CVE-2014-3613 BID:69748  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15642 JVNDB-2014-004517 OpenStack Keystone のカタログの URL 置換における重要な設定オプションを読まれる脆弱性 OpenStack Keystone のカタログの URL 置換には、重要な設定オプションを読まれる脆弱性が存在します。 CVE-2014-3621 70909 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004517.html  View