switch SSL socket into non-blocking mode after handshake (#960765)

  - prevent an artificial timeout event due to stale     speed-check data (#906031)

    - show proper host name on failed resolve (#957173) fix       cookie tailmatching to prevent cross-domain leakage       (CVE-2013-1944)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

YAMADA Yasuharu discovered that libcurl was vulnerable to a cookie leak when doing requests across domains with matching tails. curl did not properly restrict cookies to domains and subdomains. If a user or automated system were tricked into processing a specially crafted URL, an attacker could read cookie values stored by unrelated webservers.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Yamada Yasuharu discovered that cURL, an URL transfer library, is vulnerable to expose potentially sensitive information when doing requests across domains with matching tails. Due to a bug in the tailmatch function when matching domain names, it was possible that cookies set for a domain 'ample.com' could accidentally also be sent by libcurl when communicating with 'example.com'.

Both curl the command line tool and applications using the libcurl library are vulnerable.

fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

cURL provides the libcurl library and a command line tool for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

A flaw was found in the way libcurl matched domains associated with cookies. This could lead to cURL or an application linked against libcurl sending the wrong cookie if only part of the domain name matched the domain associated with the cookie, disclosing the cookie to unrelated hosts. (CVE-2013-1944)

Red Hat would like to thank the cURL project for reporting this issue.
Upstream acknowledges YAMADA Yasuharu as the original reporter.

Users of curl should upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using libcurl must be restarted for the update to take effect.

A flaw was found in the way libcurl matched domains associated with cookies. This could lead to cURL or an application linked against libcurl sending the wrong cookie if only part of the domain name matched the domain associated with the cookie, disclosing the cookie to unrelated hosts. (CVE-2013-1944)

All running applications using libcurl must be restarted for the update to take effect.

This update fixes the cookie domain tailmatch vulnerability in curl.
CVE-2013-1944 has been assigned to this issue.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0771 advisory.

    [7.19.7-36]
    - fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
66436	Fedora 18 : curl-7.27.0-10.fc18 (2013-7813)	Nessus	Fedora Local Security Checks	5/15/2013	1/11/2021	medium
65981	Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : curl vulnerability (USN-1801-1)	Nessus	Ubuntu Local Security Checks	4/16/2013	9/19/2019	medium
66159	Debian DSA-2660-1 : curl - exposure of sensitive information	Nessus	Debian Local Security Checks	4/22/2013	1/11/2021	medium
66165	Fedora 19 : curl-7.29.0-5.fc19 (2013-5598)	Nessus	Fedora Local Security Checks	4/22/2013	1/11/2021	medium
66206	CentOS 5 / 6 : curl (CESA-2013:0771)	Nessus	CentOS Local Security Checks	4/25/2013	1/4/2021	medium
66226	Scientific Linux Security Update : curl on SL5.x, SL6.x i386/x86_64 (20130424)	Nessus	Scientific Linux Local Security Checks	4/26/2013	1/14/2021	medium
66354	SuSE 11.2 Security Update : curl (SAT Patch Number 7633)	Nessus	SuSE Local Security Checks	5/9/2013	1/19/2021	medium
68816	Oracle Linux 5 / 6 : curl (ELSA-2013-0771)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	critical
66213	RHEL 5 / 6 : curl (RHSA-2013:0771)	Nessus	Red Hat Local Security Checks	4/25/2013	1/14/2021	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

critical

medium