NVD

Id
57122  
Name
CVE-2007-5034  
Description
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-09-21  
Modified Date
2011-03-07  
Seq
2007-5034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291666 57122 CVE-2007-5034 http://bugzilla.elinks.cz/show_bug.cgi?id=937  View
291667 57122 CVE-2007-5034 oval:org.mitre.oval:def:10335  View
291668 57122 CVE-2007-5034 DSA-1380  View
291669 57122 CVE-2007-5034 RHSA-2007:0933  View
291670 57122 CVE-2007-5034 20071005 rPSA-2007-0209-1 elinks  View
291671 57122 CVE-2007-5034 25799  View
291672 57122 CVE-2007-5034 1018764  View
291673 57122 CVE-2007-5034 USN-519-1  View
291674 57122 CVE-2007-5034 ADV-2007-3278  View
291675 57122 CVE-2007-5034 https://bugs.launchpad.net/ubuntu/+source/elinks/+bug/141018  View
291676 57122 CVE-2007-5034 https://bugzilla.redhat.com/show_bug.cgi?id=297981  View
291677 57122 CVE-2007-5034 FEDORA-2007-710  View
291678 57122 CVE-2007-5034 FEDORA-2007-2224  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52077 JVNDB-2007-000740 ELinks において https の POST リクエストで平文が含まれる問題 ELinks には、https URL の POST リクエストを送信する際に、平文で POST リクエストの body と content ヘッダを加える問題が存在します。 CVE-2007-5034 28389 CVE-2007-5034 57122 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000740.html 2007-09-21 2007-11-29 View