NVD

Id
38071  
Name
CVE-2013-1944  
Description
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-04-29  
Modified Date
2016-09-08  
Seq
2013-1944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194590 38071 CVE-2013-1944 http://curl.haxx.se/docs/adv_20130412.html  View
194591 38071 CVE-2013-1944 APPLE-SA-2013-10-22-3  View
194592 38071 CVE-2013-1944 FEDORA-2013-5618  View
194593 38071 CVE-2013-1944 FEDORA-2013-5598  View
194594 38071 CVE-2013-1944 FEDORA-2013-6780  View
194595 38071 CVE-2013-1944 FEDORA-2013-6766  View
194596 38071 CVE-2013-1944 FEDORA-2013-7813  View
194597 38071 CVE-2013-1944 FEDORA-2013-7797  View
194598 38071 CVE-2013-1944 openSUSE-SU-2013:0876  View
194599 38071 CVE-2013-1944 openSUSE-SU-2013:0879  View
194600 38071 CVE-2013-1944 RHSA-2013:0771  View
194601 38071 CVE-2013-1944 DSA-2660  View
194602 38071 CVE-2013-1944 MDVSA-2013:151  View
194603 38071 CVE-2013-1944 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
194604 38071 CVE-2013-1944 59058  View
194605 38071 CVE-2013-1944 USN-1801-1  View
194606 38071 CVE-2013-1944 https://bugzilla.redhat.com/show_bug.cgi?id=950577  View
194607 38071 CVE-2013-1944 https://github.com/bagder/curl/commit/2eb8dcf26cb37f09cffe26909a646e702dbcab66  View
194608 38071 CVE-2013-1944 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0121  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20947 JVNDB-2013-002522 cURL および libcurl の cookie.c における Cookie を盗まれる脆弱性 cURL および libcurl の cookie.c 内の tailMatch 関数は、Cookie を送信する際、パスドメインを適切に一致させないため、Cookie を盗まれる脆弱性が存在します。 CVE-2013-1944 61886 CVE-2013-1944 38071 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002522.html 2013-04-12 2014-05-14 View