Ubuntu Security Notice (C) 2009-2016 Canonical, Inc. / NASL script (C) 2009-2016 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related
USN-726-1 fixed a vulnerability in curl. Due to an incomplete fix, a
regression was introduced in Ubuntu 8.10 that caused certain types of
URLs to fail. This update fixes the problem. We apologize for the
It was discovered that curl did not enforce any restrictions when
following URL redirects. If a user or automated system were tricked
into opening a URL to an untrusted server, an attacker could use
redirects to gain access to arbitrary files. This update changes curl
behavior to prevent following 'file' URLs after a redirect.
Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
Update the affected packages.
Risk factor :
Medium / CVSS Base Score : 6.8
CVSS Temporal Score : 5.9
Public Exploit Available : true