5

CVE-2013-1944

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haxx ≫ Curl Version <= 7.29.0
Haxx ≫ Curl Version 6.0
Haxx ≫ Curl Version 6.1
Haxx ≫ Curl Version 6.1 Update beta
Haxx ≫ Curl Version 6.2
Haxx ≫ Curl Version 6.3
Haxx ≫ Curl Version 6.3.1
Haxx ≫ Curl Version 6.4
Haxx ≫ Curl Version 6.5
Haxx ≫ Curl Version 6.5.1
Haxx ≫ Curl Version 6.5.2
Haxx ≫ Curl Version 7.1
Haxx ≫ Curl Version 7.1.1
Haxx ≫ Curl Version 7.2
Haxx ≫ Curl Version 7.2.1
Haxx ≫ Curl Version 7.3
Haxx ≫ Curl Version 7.4
Haxx ≫ Curl Version 7.4.1
Haxx ≫ Curl Version 7.4.2
Haxx ≫ Curl Version 7.5.1
Haxx ≫ Curl Version 7.5.2
Haxx ≫ Curl Version 7.6
Haxx ≫ Curl Version 7.6.1
Haxx ≫ Curl Version 7.7
Haxx ≫ Curl Version 7.7.1
Haxx ≫ Curl Version 7.7.2
Haxx ≫ Curl Version 7.7.3
Haxx ≫ Curl Version 7.8
Haxx ≫ Curl Version 7.8.1
Haxx ≫ Curl Version 7.9
Haxx ≫ Curl Version 7.9.1
Haxx ≫ Curl Version 7.9.2
Haxx ≫ Curl Version 7.9.3
Haxx ≫ Curl Version 7.9.4
Haxx ≫ Curl Version 7.9.5
Haxx ≫ Curl Version 7.9.6
Haxx ≫ Curl Version 7.9.7
Haxx ≫ Curl Version 7.9.8
Haxx ≫ Curl Version 7.10
Haxx ≫ Curl Version 7.10.1
Haxx ≫ Curl Version 7.10.2
Haxx ≫ Curl Version 7.10.3
Haxx ≫ Curl Version 7.10.4
Haxx ≫ Curl Version 7.10.5
Haxx ≫ Curl Version 7.10.6
Haxx ≫ Curl Version 7.10.7
Haxx ≫ Curl Version 7.10.8
Haxx ≫ Curl Version 7.11.0
Haxx ≫ Curl Version 7.11.1
Haxx ≫ Curl Version 7.11.2
Haxx ≫ Curl Version 7.12.0
Haxx ≫ Curl Version 7.12.1
Haxx ≫ Curl Version 7.12.2
Haxx ≫ Curl Version 7.12.3
Haxx ≫ Curl Version 7.13.0
Haxx ≫ Curl Version 7.13.1
Haxx ≫ Curl Version 7.13.2
Haxx ≫ Curl Version 7.14.0
Haxx ≫ Curl Version 7.14.1
Haxx ≫ Curl Version 7.15.0
Haxx ≫ Curl Version 7.15.1
Haxx ≫ Curl Version 7.15.2
Haxx ≫ Curl Version 7.15.3
Haxx ≫ Curl Version 7.15.4
Haxx ≫ Curl Version 7.15.5
Haxx ≫ Curl Version 7.16.0
Haxx ≫ Curl Version 7.16.1
Haxx ≫ Curl Version 7.16.2
Haxx ≫ Curl Version 7.16.3
Haxx ≫ Curl Version 7.16.4
Haxx ≫ Curl Version 7.17.0
Haxx ≫ Curl Version 7.17.1
Haxx ≫ Curl Version 7.18.0
Haxx ≫ Curl Version 7.18.1
Haxx ≫ Curl Version 7.18.2
Haxx ≫ Curl Version 7.19.0
Haxx ≫ Curl Version 7.19.1
Haxx ≫ Curl Version 7.19.2
Haxx ≫ Curl Version 7.19.3
Haxx ≫ Curl Version 7.19.4
Haxx ≫ Curl Version 7.19.5
Haxx ≫ Curl Version 7.19.6
Haxx ≫ Curl Version 7.19.7
Haxx ≫ Curl Version 7.20.0
Haxx ≫ Curl Version 7.20.1
Haxx ≫ Curl Version 7.21.0
Haxx ≫ Curl Version 7.21.1
Haxx ≫ Curl Version 7.21.2
Haxx ≫ Curl Version 7.21.3
Haxx ≫ Curl Version 7.21.4
Haxx ≫ Curl Version 7.21.5
Haxx ≫ Curl Version 7.21.6
Haxx ≫ Curl Version 7.21.7
Haxx ≫ Curl Version 7.22.0
Haxx ≫ Curl Version 7.23.0
Haxx ≫ Curl Version 7.23.1
Haxx ≫ Curl Version 7.24.0
Haxx ≫ Curl Version 7.25.0
Haxx ≫ Curl Version 7.26.0
Haxx ≫ Curl Version 7.27.0
Haxx ≫ Curl Version 7.28.0
Haxx ≫ Curl Version 7.28.1
Haxx ≫ Libcurl Version <= 7.29.0
Haxx ≫ Libcurl Version 7.14.0
Haxx ≫ Libcurl Version 7.14.1
Haxx ≫ Libcurl Version 7.15.0
Haxx ≫ Libcurl Version 7.15.1
Haxx ≫ Libcurl Version 7.15.2
Haxx ≫ Libcurl Version 7.15.3
Haxx ≫ Libcurl Version 7.15.4
Haxx ≫ Libcurl Version 7.15.5
Haxx ≫ Libcurl Version 7.16.0
Haxx ≫ Libcurl Version 7.16.2
Haxx ≫ Libcurl Version 7.16.3
Haxx ≫ Libcurl Version 7.16.4
Haxx ≫ Libcurl Version 7.17.0
Haxx ≫ Libcurl Version 7.17.1
Haxx ≫ Libcurl Version 7.18.0
Haxx ≫ Libcurl Version 7.18.2
Haxx ≫ Libcurl Version 7.19.3
Haxx ≫ Libcurl Version 7.20.0
Haxx ≫ Libcurl Version 7.21.2
Haxx ≫ Libcurl Version 7.22.0
Haxx ≫ Libcurl Version 7.23.0
Haxx ≫ Libcurl Version 7.28.0
Haxx ≫ Libcurl Version 7.28.1
Canonical ≫ Ubuntu Linux Version 8.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 10.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 11.10
Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 12.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.34% 0.902
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://curl.haxx.se/docs/adv_20130412.html
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102056.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102711.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104207.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104598.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105539.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106606.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00013.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00016.html
http://rhn.redhat.com/errata/RHSA-2013-0771.html
http://secunia.com/advisories/53044
Vendor Advisory
http://secunia.com/advisories/53051
Vendor Advisory
http://secunia.com/advisories/53097
Vendor Advisory
http://www.debian.org/security/2012/dsa-2660
http://www.mandriva.com/security/advisories?name=MDVSA-2013:151
http://www.osvdb.org/92316
http://www.securityfocus.com/bid/59058
http://www.ubuntu.com/usn/USN-1801-1
https://bugzilla.redhat.com/show_bug.cgi?id=950577
https://github.com/bagder/curl/commit/2eb8dcf26cb37f09cffe26909a646e702dbcab66
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0121