NVD

Id
29068  
Name
CVE-2014-0138  
Description
The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-15  
Modified Date
2017-01-06  
Seq
2014-0138  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153574 29068 CVE-2014-0138 http://curl.haxx.se/docs/adv_20140326A.html  View
153575 29068 CVE-2014-0138 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
153576 29068 CVE-2014-0138 58615  View
153577 29068 CVE-2014-0138 http://www-01.ibm.com/support/docview.wss?uid=swg21675820  View
153578 29068 CVE-2014-0138 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862  View
153579 29068 CVE-2014-0138 DSA-2902  View
153580 29068 CVE-2014-0138 http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/  View
153581 29068 CVE-2014-0138 http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/  View
153582 29068 CVE-2014-0138 http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/  View
153583 29068 CVE-2014-0138 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
153584 29068 CVE-2014-0138 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
153585 29068 CVE-2014-0138 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13266 JVNDB-2014-002141 cURL および libcurl のデフォルト設定における他のユーザとして接続される脆弱性 cURL および libcurl のデフォルト設定は、(1) SCP、(2) SFTP、(3) POP3、(4) POP3S、(5) IMAP、(6) IMAPS、(7) SMTP、(8) SMTPS、(9) LDAP、および (10) LDAPS 接続を再使用するため、他のユーザとして接続される脆弱性が存在します。 CVE-2014-0138 67539 CVE-2014-0138 29068 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002141.html 2014-03-26 2015-07-29 View