This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. (CVE-2009-2417) Additionally the arbitrary file access problem was fixed. (CVE-2009-0037)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. (CVE-2009-2417)

Scott Cantor reported that cURL is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker could use the certificate during a man-in-the-middle attack and potentially confuse cURL into accepting it by mistake. (CVE-2009-2417)

All running applications using libcurl must be restarted for the update to take effect.

The remote host is running Curl, a download client for various protocols.  This version of Curl reportedly fails to properly validate the domain name in a signed CA certificate because the application stops reading the domain name when it encounters a NULL character.  An attacker can exploit this by obtaining a legitimate certificate for a subdomain that contains a NULL character.  This issue only affects Curl when it is compiled against OpenSSL.

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.3.  Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server

  - Apache

  - CoreAudio

  - CoreMedia

  - CoreTypes

  - CUPS

  - DesktopServices

  - Disk Images

  - Directory Services

  - Dovecot

  - Event Monitor

  - FreeRADIUS

  - FTP Server

  - iChat Server

  - ImageIO

  - Image RAW

  - Libsystem

  - Mail

  - MySQL

  - OS Services

  - Password Server

  - PHP

  - Podcast Producer

  - Preferences

  - PS Normalizer

  - QuickTime

  - Ruby

  - Server Admin

  - SMB

  - Tomcat

  - Wiki Server

  - X11

ID	Name	Product	Family	Published	Updated	Severity
41489	SuSE 10 Security Update : compat-curl2 (ZYPP Patch Number 6408)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	high
41497	SuSE 10 Security Update : curl (ZYPP Patch Number 6402)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	high
60639	Scientific Linux Security Update : curl on SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	high
5130	Curl < 7.19.6 Certificate Validation Bypass Vulnerability	Nessus Network Monitor	Web Clients	8/13/2009	3/6/2019	medium
5489	Mac OS X < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	3/30/2010	3/6/2019	critical
801389	Curl < 7.19.6 Certificate Validation Bypass Vulnerability	Log Correlation Engine	Web Clients	8/13/2009		high

Detections

Analytics

Plugins Search

high

high

high

medium

critical

high