cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://kc.mcafee.com/corporate/index?page=content&id=SB10131 | x_refsource_CONFIRM |
| http://curl.haxx.se/docs/adv_20150617A.html | x_refsource_CONFIRM |
| http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html | vendor-advisory x_refsource_FEDORA |
| http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html | x_refsource_CONFIRM |
| http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/75385 | vdb-entry x_refsource_BID |
| http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/91787 | vdb-entry x_refsource_BID |
| http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html | x_refsource_CONFIRM |
| https://security.gentoo.org/glsa/201509-02 | vendor-advisory x_refsource_GENTOO |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://kc.mcafee.com/corporate/index?page=content&id=SB10131 | x_refsource_CONFIRM x_transferred |
| http://curl.haxx.se/docs/adv_20150617A.html | x_refsource_CONFIRM x_transferred |
| http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html | vendor-advisory x_refsource_FEDORA x_transferred |
| http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html | x_refsource_CONFIRM x_transferred |
| http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/75385 | vdb-entry x_refsource_BID x_transferred |
| http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/91787 | vdb-entry x_refsource_BID x_transferred |
| http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html | x_refsource_CONFIRM x_transferred |
| https://security.gentoo.org/glsa/201509-02 | vendor-advisory x_refsource_GENTOO x_transferred |