5

CVE-2013-1944

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Data is provided by the National Vulnerability Database (NVD)
Haxx ≫ Curl Version <= 7.29.0
Haxx ≫ Curl Version6.0
Haxx ≫ Curl Version6.1
Haxx ≫ Curl Version6.1 Updatebeta
Haxx ≫ Curl Version6.2
Haxx ≫ Curl Version6.3
Haxx ≫ Curl Version6.3.1
Haxx ≫ Curl Version6.4
Haxx ≫ Curl Version6.5
Haxx ≫ Curl Version6.5.1
Haxx ≫ Curl Version6.5.2
Haxx ≫ Curl Version7.1
Haxx ≫ Curl Version7.1.1
Haxx ≫ Curl Version7.2
Haxx ≫ Curl Version7.2.1
Haxx ≫ Curl Version7.3
Haxx ≫ Curl Version7.4
Haxx ≫ Curl Version7.4.1
Haxx ≫ Curl Version7.4.2
Haxx ≫ Curl Version7.5.1
Haxx ≫ Curl Version7.5.2
Haxx ≫ Curl Version7.6
Haxx ≫ Curl Version7.6.1
Haxx ≫ Curl Version7.7
Haxx ≫ Curl Version7.7.1
Haxx ≫ Curl Version7.7.2
Haxx ≫ Curl Version7.7.3
Haxx ≫ Curl Version7.8
Haxx ≫ Curl Version7.8.1
Haxx ≫ Curl Version7.9
Haxx ≫ Curl Version7.9.1
Haxx ≫ Curl Version7.9.2
Haxx ≫ Curl Version7.9.3
Haxx ≫ Curl Version7.9.4
Haxx ≫ Curl Version7.9.5
Haxx ≫ Curl Version7.9.6
Haxx ≫ Curl Version7.9.7
Haxx ≫ Curl Version7.9.8
Haxx ≫ Curl Version7.10
Haxx ≫ Curl Version7.10.1
Haxx ≫ Curl Version7.10.2
Haxx ≫ Curl Version7.10.3
Haxx ≫ Curl Version7.10.4
Haxx ≫ Curl Version7.10.5
Haxx ≫ Curl Version7.10.6
Haxx ≫ Curl Version7.10.7
Haxx ≫ Curl Version7.10.8
Haxx ≫ Curl Version7.11.0
Haxx ≫ Curl Version7.11.1
Haxx ≫ Curl Version7.11.2
Haxx ≫ Curl Version7.12.0
Haxx ≫ Curl Version7.12.1
Haxx ≫ Curl Version7.12.2
Haxx ≫ Curl Version7.12.3
Haxx ≫ Curl Version7.13.0
Haxx ≫ Curl Version7.13.1
Haxx ≫ Curl Version7.13.2
Haxx ≫ Curl Version7.14.0
Haxx ≫ Curl Version7.14.1
Haxx ≫ Curl Version7.15.0
Haxx ≫ Curl Version7.15.1
Haxx ≫ Curl Version7.15.2
Haxx ≫ Curl Version7.15.3
Haxx ≫ Curl Version7.15.4
Haxx ≫ Curl Version7.15.5
Haxx ≫ Curl Version7.16.0
Haxx ≫ Curl Version7.16.1
Haxx ≫ Curl Version7.16.2
Haxx ≫ Curl Version7.16.3
Haxx ≫ Curl Version7.16.4
Haxx ≫ Curl Version7.17.0
Haxx ≫ Curl Version7.17.1
Haxx ≫ Curl Version7.18.0
Haxx ≫ Curl Version7.18.1
Haxx ≫ Curl Version7.18.2
Haxx ≫ Curl Version7.19.0
Haxx ≫ Curl Version7.19.1
Haxx ≫ Curl Version7.19.2
Haxx ≫ Curl Version7.19.3
Haxx ≫ Curl Version7.19.4
Haxx ≫ Curl Version7.19.5
Haxx ≫ Curl Version7.19.6
Haxx ≫ Curl Version7.19.7
Haxx ≫ Curl Version7.20.0
Haxx ≫ Curl Version7.20.1
Haxx ≫ Curl Version7.21.0
Haxx ≫ Curl Version7.21.1
Haxx ≫ Curl Version7.21.2
Haxx ≫ Curl Version7.21.3
Haxx ≫ Curl Version7.21.4
Haxx ≫ Curl Version7.21.5
Haxx ≫ Curl Version7.21.6
Haxx ≫ Curl Version7.21.7
Haxx ≫ Curl Version7.22.0
Haxx ≫ Curl Version7.23.0
Haxx ≫ Curl Version7.23.1
Haxx ≫ Curl Version7.24.0
Haxx ≫ Curl Version7.25.0
Haxx ≫ Curl Version7.26.0
Haxx ≫ Curl Version7.27.0
Haxx ≫ Curl Version7.28.0
Haxx ≫ Curl Version7.28.1
Haxx ≫ Libcurl Version <= 7.29.0
Haxx ≫ Libcurl Version7.14.0
Haxx ≫ Libcurl Version7.14.1
Haxx ≫ Libcurl Version7.15.0
Haxx ≫ Libcurl Version7.15.1
Haxx ≫ Libcurl Version7.15.2
Haxx ≫ Libcurl Version7.15.3
Haxx ≫ Libcurl Version7.15.4
Haxx ≫ Libcurl Version7.15.5
Haxx ≫ Libcurl Version7.16.0
Haxx ≫ Libcurl Version7.16.2
Haxx ≫ Libcurl Version7.16.3
Haxx ≫ Libcurl Version7.16.4
Haxx ≫ Libcurl Version7.17.0
Haxx ≫ Libcurl Version7.17.1
Haxx ≫ Libcurl Version7.18.0
Haxx ≫ Libcurl Version7.18.2
Haxx ≫ Libcurl Version7.19.3
Haxx ≫ Libcurl Version7.20.0
Haxx ≫ Libcurl Version7.21.2
Haxx ≫ Libcurl Version7.22.0
Haxx ≫ Libcurl Version7.23.0
Haxx ≫ Libcurl Version7.28.0
Haxx ≫ Libcurl Version7.28.1
Canonical ≫ Ubuntu Linux Version8.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version12.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.48% 0.847
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.