5

CVE-2013-1944

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haxx ≫ Curl Version <= 7.29.0
Haxx ≫ Curl Version6.0
Haxx ≫ Curl Version6.1
Haxx ≫ Curl Version6.1 Updatebeta
Haxx ≫ Curl Version6.2
Haxx ≫ Curl Version6.3
Haxx ≫ Curl Version6.3.1
Haxx ≫ Curl Version6.4
Haxx ≫ Curl Version6.5
Haxx ≫ Curl Version6.5.1
Haxx ≫ Curl Version6.5.2
Haxx ≫ Curl Version7.1
Haxx ≫ Curl Version7.1.1
Haxx ≫ Curl Version7.2
Haxx ≫ Curl Version7.2.1
Haxx ≫ Curl Version7.3
Haxx ≫ Curl Version7.4
Haxx ≫ Curl Version7.4.1
Haxx ≫ Curl Version7.4.2
Haxx ≫ Curl Version7.5.1
Haxx ≫ Curl Version7.5.2
Haxx ≫ Curl Version7.6
Haxx ≫ Curl Version7.6.1
Haxx ≫ Curl Version7.7
Haxx ≫ Curl Version7.7.1
Haxx ≫ Curl Version7.7.2
Haxx ≫ Curl Version7.7.3
Haxx ≫ Curl Version7.8
Haxx ≫ Curl Version7.8.1
Haxx ≫ Curl Version7.9
Haxx ≫ Curl Version7.9.1
Haxx ≫ Curl Version7.9.2
Haxx ≫ Curl Version7.9.3
Haxx ≫ Curl Version7.9.4
Haxx ≫ Curl Version7.9.5
Haxx ≫ Curl Version7.9.6
Haxx ≫ Curl Version7.9.7
Haxx ≫ Curl Version7.9.8
Haxx ≫ Curl Version7.10
Haxx ≫ Curl Version7.10.1
Haxx ≫ Curl Version7.10.2
Haxx ≫ Curl Version7.10.3
Haxx ≫ Curl Version7.10.4
Haxx ≫ Curl Version7.10.5
Haxx ≫ Curl Version7.10.6
Haxx ≫ Curl Version7.10.7
Haxx ≫ Curl Version7.10.8
Haxx ≫ Curl Version7.11.0
Haxx ≫ Curl Version7.11.1
Haxx ≫ Curl Version7.11.2
Haxx ≫ Curl Version7.12.0
Haxx ≫ Curl Version7.12.1
Haxx ≫ Curl Version7.12.2
Haxx ≫ Curl Version7.12.3
Haxx ≫ Curl Version7.13.0
Haxx ≫ Curl Version7.13.1
Haxx ≫ Curl Version7.13.2
Haxx ≫ Curl Version7.14.0
Haxx ≫ Curl Version7.14.1
Haxx ≫ Curl Version7.15.0
Haxx ≫ Curl Version7.15.1
Haxx ≫ Curl Version7.15.2
Haxx ≫ Curl Version7.15.3
Haxx ≫ Curl Version7.15.4
Haxx ≫ Curl Version7.15.5
Haxx ≫ Curl Version7.16.0
Haxx ≫ Curl Version7.16.1
Haxx ≫ Curl Version7.16.2
Haxx ≫ Curl Version7.16.3
Haxx ≫ Curl Version7.16.4
Haxx ≫ Curl Version7.17.0
Haxx ≫ Curl Version7.17.1
Haxx ≫ Curl Version7.18.0
Haxx ≫ Curl Version7.18.1
Haxx ≫ Curl Version7.18.2
Haxx ≫ Curl Version7.19.0
Haxx ≫ Curl Version7.19.1
Haxx ≫ Curl Version7.19.2
Haxx ≫ Curl Version7.19.3
Haxx ≫ Curl Version7.19.4
Haxx ≫ Curl Version7.19.5
Haxx ≫ Curl Version7.19.6
Haxx ≫ Curl Version7.19.7
Haxx ≫ Curl Version7.20.0
Haxx ≫ Curl Version7.20.1
Haxx ≫ Curl Version7.21.0
Haxx ≫ Curl Version7.21.1
Haxx ≫ Curl Version7.21.2
Haxx ≫ Curl Version7.21.3
Haxx ≫ Curl Version7.21.4
Haxx ≫ Curl Version7.21.5
Haxx ≫ Curl Version7.21.6
Haxx ≫ Curl Version7.21.7
Haxx ≫ Curl Version7.22.0
Haxx ≫ Curl Version7.23.0
Haxx ≫ Curl Version7.23.1
Haxx ≫ Curl Version7.24.0
Haxx ≫ Curl Version7.25.0
Haxx ≫ Curl Version7.26.0
Haxx ≫ Curl Version7.27.0
Haxx ≫ Curl Version7.28.0
Haxx ≫ Curl Version7.28.1
Haxx ≫ Libcurl Version <= 7.29.0
Haxx ≫ Libcurl Version7.14.0
Haxx ≫ Libcurl Version7.14.1
Haxx ≫ Libcurl Version7.15.0
Haxx ≫ Libcurl Version7.15.1
Haxx ≫ Libcurl Version7.15.2
Haxx ≫ Libcurl Version7.15.3
Haxx ≫ Libcurl Version7.15.4
Haxx ≫ Libcurl Version7.15.5
Haxx ≫ Libcurl Version7.16.0
Haxx ≫ Libcurl Version7.16.2
Haxx ≫ Libcurl Version7.16.3
Haxx ≫ Libcurl Version7.16.4
Haxx ≫ Libcurl Version7.17.0
Haxx ≫ Libcurl Version7.17.1
Haxx ≫ Libcurl Version7.18.0
Haxx ≫ Libcurl Version7.18.2
Haxx ≫ Libcurl Version7.19.3
Haxx ≫ Libcurl Version7.20.0
Haxx ≫ Libcurl Version7.21.2
Haxx ≫ Libcurl Version7.22.0
Haxx ≫ Libcurl Version7.23.0
Haxx ≫ Libcurl Version7.28.0
Haxx ≫ Libcurl Version7.28.1
Canonical ≫ Ubuntu Linux Version8.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version12.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.99% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://curl.haxx.se/docs/adv_20130412.html
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102056.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102711.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104207.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104598.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105539.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106606.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00013.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00016.html
http://rhn.redhat.com/errata/RHSA-2013-0771.html
http://secunia.com/advisories/53044
Vendor Advisory
http://secunia.com/advisories/53051
Vendor Advisory
http://secunia.com/advisories/53097
Vendor Advisory
http://www.debian.org/security/2012/dsa-2660
http://www.mandriva.com/security/advisories?name=MDVSA-2013:151
http://www.osvdb.org/92316
http://www.securityfocus.com/bid/59058
http://www.ubuntu.com/usn/USN-1801-1
https://bugzilla.redhat.com/show_bug.cgi?id=950577
https://github.com/bagder/curl/commit/2eb8dcf26cb37f09cffe26909a646e702dbcab66
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0121