Vulnerability Bulletins |
DSA-2849 curl - information disclosure |
|
| Affected software | Debian |
|
Paras Sethia discovered that libcurl, a client-side URL transferlibrary, would sometimes mix up multiple HTTP and HTTPS connectionswith NTLM authentication to the same server, sending requests for oneuser over the connection authenticated as a different user. More info: http://www.debian.org/security/2014/dsa-2849 |
|