NVD

Id
45921  
Name
CVE-2012-4545  
Description
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-01-02  
Modified Date
2013-12-05  
Seq
2012-4545  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230701 45921 CVE-2012-4545 http://bugzilla.elinks.cz/show_bug.cgi?id=1124  View
230702 45921 CVE-2012-4545 http://repo.or.cz/w/elinks.git/blobdiff/89056e21fc7ab8e1c2d4e06ec9d0c6d01e70669a..da18694ff7dd0b67dfcb3c417fb0579b1e7d02d7:/src/protocol/http/http_negotiate.c  View
230703 45921 CVE-2012-4545 RHSA-2013:0250  View
230704 45921 CVE-2012-4545 DSA-2592  View
230705 45921 CVE-2012-4545 MDVSA-2013:075  View
230706 45921 CVE-2012-4545 57065  View
230707 45921 CVE-2012-4545 elinks-httpnegotiate-security-bypass(80882)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30148 JVNDB-2012-005855 ELinks の protocol/http/http_negotiate.c におけるクライアントとして認証される脆弱性 ELinks の protocol/http/http_negotiate.c 内の http_negotiate_create_context 関数は、HTTP Negotiate または GSS-Negotiate 認証を使用する場合、ユーザの認証情報を GSSAPI へ委任するため、クライアントとして認証される脆弱性が存在します。 CVE-2012-4545 57783 CVE-2012-4545 45921 5.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005855.html 2012-10-28 2013-01-07 View