CVE-2011-2192

MEDIUM

Description

The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.

ID	Name	Product	Family	Severity
91740	OracleVM 3.2 : curl (OVMSA-2016-0056)	Nessus	OracleVM Local Security Checks	medium
89105	VMware ESX / ESXi Service Console and Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0001) (remote check)	Nessus	Misc.	high
75807	openSUSE Security Update : curl (openSUSE-SU-2012:0199-1)	Nessus	SuSE Local Security Checks	medium
73551	FreeBSD : cURL -- inappropriate GSSAPI delegation (9aecb94c-c1ad-11e3-a5ac-001b21614864)	Nessus	FreeBSD Local Security Checks	medium
68300	Oracle Linux 4 / 5 / 6 : curl (ELSA-2011-0918)	Nessus	Oracle Linux Local Security Checks	medium
801392	cURL/libcURL GSS/Negotiate Feature Spoofing Security Vulnerability	Log Correlation Engine	Web Clients	medium
6904	cURL/libcURL GSS/Negotiate Feature Spoofing	Nessus Network Monitor	Web Clients	high
61078	Scientific Linux Security Update : curl on SL4.x, SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
58811	HP System Management Homepage < 7.0 Multiple Vulnerabilities	Nessus	Web Servers	critical
58212	GLSA-201203-02 : cURL: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	high
6303	Mac OS X 10.7 < 10.7.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
57798	Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)	Nessus	MacOS X Local Security Checks	critical
57797	Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)	Nessus	MacOS X Local Security Checks	critical
57749	VMSA-2012-0001 : VMware ESXi and ESX updates to third-party library and ESX Service Console	Nessus	VMware ESX Local Security Checks	high
55664	Mandriva Linux Security Advisory : curl (MDVSA-2011:116)	Nessus	Mandriva Local Security Checks	medium
55519	RHEL 4 / 5 / 6 : curl (RHSA-2011:0918)	Nessus	Red Hat Local Security Checks	medium
55515	CentOS 4 / 5 : curl (CESA-2011:0918)	Nessus	CentOS Local Security Checks	medium
55497	Fedora 14 : curl-7.21.0-8.fc14 (2011-8640)	Nessus	Fedora Local Security Checks	medium
55491	Debian DSA-2271-1 : curl - improper delegation of client credentials	Nessus	Debian Local Security Checks	medium
55426	Fedora 15 : curl-7.21.3-8.fc15 (2011-8586)	Nessus	Fedora Local Security Checks	medium
55414	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : curl vulnerabilities (USN-1158-1)	Nessus	Ubuntu Local Security Checks	high

CVE-2011-2192

Description

References

Details

Risk Information

CVSS v2.0