Total vulnerabilities in the database
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
| Software | From | Fixed in |
|---|---|---|
| haxx / libcurl | 7.10.6 | 7.21.6.x |
| apple / mac_os_x | - | 10.7.3 |
| fedoraproject / fedora | 15 | 15.x |
| fedoraproject / fedora | 14 | 14.x |
| debian / debian_linux | 5.0 | 5.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| debian / debian_linux | 6.0 | 6.0.x |
| canonical / ubuntu_linux | 10.10 | 10.10.x |
| canonical / ubuntu_linux | 11.04 | 11.04.x |
| canonical / ubuntu_linux | 8.04 | 8.04.x |
| canonical / ubuntu_linux | 10.04 | 10.04.x |