NVD

Id
28969  
Name
CVE-2014-0015  
Description
cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-02-01  
Modified Date
2016-12-02  
Seq
2014-0015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152704 28969 CVE-2014-0015 APPLE-SA-2014-06-30-2  View
152705 28969 CVE-2014-0015 http://curl.haxx.se/docs/adv_20140129.html  View
152706 28969 CVE-2014-0015 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743  View
152707 28969 CVE-2014-0015 FEDORA-2014-1876  View
152708 28969 CVE-2014-0015 FEDORA-2014-1864  View
152709 28969 CVE-2014-0015 openSUSE-SU-2014:0274  View
152710 28969 CVE-2014-0015 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
152711 28969 CVE-2014-0015 http://support.apple.com/kb/HT6296  View
152712 28969 CVE-2014-0015 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862  View
152713 28969 CVE-2014-0015 DSA-2849  View
152714 28969 CVE-2014-0015 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
152715 28969 CVE-2014-0015 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
152716 28969 CVE-2014-0015 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
152717 28969 CVE-2014-0015 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
152718 28969 CVE-2014-0015 65270  View
152719 28969 CVE-2014-0015 1029710  View
152720 28969 CVE-2014-0015 SSA:2014-044-01  View
152721 28969 CVE-2014-0015 USN-2097-1  View
152722 28969 CVE-2014-0015 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12427 JVNDB-2014-001302 cURL および libcurl における他のユーザとして認証される脆弱性 cURL および libcurl は、１つ以上の認証メソッドが有効になっている場合、NTLM 接続を再使用するため、他のユーザとして認証される脆弱性が存在します。 CVE-2014-0015 67416 CVE-2014-0015 28969 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001302.html 2014-01-29 2015-07-29 View