CVE-2015-3148 MEDIUM

Published: 2015-04-24 | Last Modified: 2026-06-17 | Status: Modified

Description

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

Additional Descriptions (1)

cURL y libcurl 7.10.6 hasta la versión 7.41.0 no reutiliza adecuadamente la conexiones Negotiate autenticadas, lo que permite a atacantes remotos conectarse como otros usuarios a través de una solicitud.

CVSS Metrics

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-284

Affected Products

Vendor	Product	Version	Update	Type
fedoraproject	fedora	21	<built-in method update of dict object at 0x72a9b0a753c0>	Operating System
fedoraproject	fedora	22	<built-in method update of dict object at 0x72a9cd087980>	Operating System
canonical	ubuntu_linux	12.04	<built-in method update of dict object at 0x72a9cd086080>	Operating System
canonical	ubuntu_linux	14.04	<built-in method update of dict object at 0x72a9cdc84dc0>	Operating System
canonical	ubuntu_linux	14.10	<built-in method update of dict object at 0x72a9b0a76000>	Operating System
canonical	ubuntu_linux	15.04	<built-in method update of dict object at 0x72a9ccf9f2c0>	Operating System
debian	debian_linux	7.0	<built-in method update of dict object at 0x72a9cd087440>	Operating System
apple	mac_os_x	10.10.0	<built-in method update of dict object at 0x72a9cd085540>	Operating System
apple	mac_os_x	10.10.1	<built-in method update of dict object at 0x72a9cd087dc0>	Operating System
apple	mac_os_x	10.10.2	<built-in method update of dict object at 0x72a9b0a74680>	Operating System
apple	mac_os_x	10.10.3	<built-in method update of dict object at 0x72a9cd086880>	Operating System
apple	mac_os_x	10.10.4	<built-in method update of dict object at 0x72a9cd087140>	Operating System
haxx	libcurl	7.10.6	<built-in method update of dict object at 0x72a9cd086e80>	Application
haxx	libcurl	7.10.7	<built-in method update of dict object at 0x72a9cd087700>	Application
haxx	libcurl	7.10.8	<built-in method update of dict object at 0x72a9cd086240>	Application
haxx	libcurl	7.11.0	<built-in method update of dict object at 0x72a9cd086e40>	Application
haxx	libcurl	7.11.1	<built-in method update of dict object at 0x72a9b0a77b40>	Application
haxx	libcurl	7.11.2	<built-in method update of dict object at 0x72a9cd087040>	Application
haxx	libcurl	7.12.0	<built-in method update of dict object at 0x72a9cd084e40>	Application
haxx	libcurl	7.12.1	<built-in method update of dict object at 0x72a9cc434180>	Application
haxx	libcurl	7.12.2	<built-in method update of dict object at 0x72a9cd087880>	Application
haxx	libcurl	7.12.3	<built-in method update of dict object at 0x72a9cd0853c0>	Application
haxx	libcurl	7.13.0	<built-in method update of dict object at 0x72a9cd084dc0>	Application
haxx	libcurl	7.13.1	<built-in method update of dict object at 0x72a9cd0870c0>	Application
haxx	libcurl	7.13.2	<built-in method update of dict object at 0x72a9cd084800>	Application
haxx	libcurl	7.14.0	<built-in method update of dict object at 0x72a9cd084200>	Application
haxx	libcurl	7.14.1	<built-in method update of dict object at 0x72a9ccf9ff40>	Application
haxx	libcurl	7.15.0	<built-in method update of dict object at 0x72a9cd0878c0>	Application
haxx	libcurl	7.15.1	<built-in method update of dict object at 0x72a9cd087b40>	Application
haxx	libcurl	7.15.2	<built-in method update of dict object at 0x72a9cd087a40>	Application
haxx	libcurl	7.15.3	<built-in method update of dict object at 0x72a9cd084080>	Application
haxx	libcurl	7.15.4	<built-in method update of dict object at 0x72a9cd086640>	Application
haxx	libcurl	7.15.5	<built-in method update of dict object at 0x72a9cd0877c0>	Application
haxx	libcurl	7.16.0	<built-in method update of dict object at 0x72a9cd086300>	Application
haxx	libcurl	7.16.1	<built-in method update of dict object at 0x72a9cd085280>	Application
haxx	libcurl	7.16.2	<built-in method update of dict object at 0x72a9cd0854c0>	Application
haxx	libcurl	7.16.3	<built-in method update of dict object at 0x72a9b0c64f40>	Application
haxx	libcurl	7.16.4	<built-in method update of dict object at 0x72a9b0c67c80>	Application
haxx	libcurl	7.17.0	<built-in method update of dict object at 0x72a9b0c651c0>	Application
haxx	libcurl	7.17.1	<built-in method update of dict object at 0x72a9b0c65a40>	Application
haxx	libcurl	7.18.0	<built-in method update of dict object at 0x72a9b0c67dc0>	Application
haxx	libcurl	7.18.1	<built-in method update of dict object at 0x72a9b0c67f00>	Application
haxx	libcurl	7.18.2	<built-in method update of dict object at 0x72a9b0c67ac0>	Application
haxx	libcurl	7.19.0	<built-in method update of dict object at 0x72a9b0c65880>	Application
haxx	libcurl	7.19.1	<built-in method update of dict object at 0x72a9b0c66440>	Application
haxx	libcurl	7.19.2	<built-in method update of dict object at 0x72a9b0c67f40>	Application
haxx	libcurl	7.19.3	<built-in method update of dict object at 0x72a9b0c65ac0>	Application
haxx	libcurl	7.19.4	<built-in method update of dict object at 0x72a9b0c676c0>	Application
haxx	libcurl	7.19.5	<built-in method update of dict object at 0x72a9b0c661c0>	Application
haxx	libcurl	7.19.6	<built-in method update of dict object at 0x72a9b0c657c0>	Application
haxx	libcurl	7.19.7	<built-in method update of dict object at 0x72a9b0c66380>	Application
haxx	libcurl	7.20.0	<built-in method update of dict object at 0x72a9b0c67080>	Application
haxx	libcurl	7.20.1	<built-in method update of dict object at 0x72a9b0c645c0>	Application
haxx	libcurl	7.21.0	<built-in method update of dict object at 0x72a9b0c64b40>	Application
haxx	libcurl	7.21.1	<built-in method update of dict object at 0x72a9b0c67b40>	Application
haxx	libcurl	7.21.2	<built-in method update of dict object at 0x72a9cd0dae80>	Application
haxx	libcurl	7.21.3	<built-in method update of dict object at 0x72a9cd0db580>	Application
haxx	libcurl	7.21.4	<built-in method update of dict object at 0x72a9cd0d8880>	Application
haxx	libcurl	7.21.5	<built-in method update of dict object at 0x72a9cd0daec0>	Application
haxx	libcurl	7.21.6	<built-in method update of dict object at 0x72a9cd0db780>	Application
haxx	libcurl	7.21.7	<built-in method update of dict object at 0x72a9cd0da000>	Application
haxx	libcurl	7.22.0	<built-in method update of dict object at 0x72a9cd0d9cc0>	Application
haxx	libcurl	7.23.0	<built-in method update of dict object at 0x72a9cd0d91c0>	Application
haxx	libcurl	7.23.1	<built-in method update of dict object at 0x72a9cd0d8740>	Application
haxx	libcurl	7.24.0	<built-in method update of dict object at 0x72a9cd0d8100>	Application
haxx	libcurl	7.25.0	<built-in method update of dict object at 0x72a9cd0d9380>	Application
haxx	libcurl	7.26.0	<built-in method update of dict object at 0x72a9cd0da280>	Application
haxx	libcurl	7.27.0	<built-in method update of dict object at 0x72a9cd0db940>	Application
haxx	libcurl	7.28.0	<built-in method update of dict object at 0x72a9cd0dacc0>	Application
haxx	libcurl	7.28.1	<built-in method update of dict object at 0x72a9cd0d8400>	Application
haxx	libcurl	7.29.0	<built-in method update of dict object at 0x72a9cd0d89c0>	Application
haxx	libcurl	7.30.0	<built-in method update of dict object at 0x72a9e5245ac0>	Application
haxx	libcurl	7.31.0	<built-in method update of dict object at 0x72a9e5244640>	Application
haxx	libcurl	7.32.0	<built-in method update of dict object at 0x72a9e5245000>	Application
haxx	libcurl	7.33.0	<built-in method update of dict object at 0x72a9b09078c0>	Application
haxx	libcurl	7.34.0	<built-in method update of dict object at 0x72a9b0904180>	Application
haxx	libcurl	7.35.0	<built-in method update of dict object at 0x72a9b0906500>	Application
haxx	libcurl	7.36.0	<built-in method update of dict object at 0x72a9b0907900>	Application
haxx	libcurl	7.37.0	<built-in method update of dict object at 0x72a9b0907c00>	Application
haxx	libcurl	7.37.1	<built-in method update of dict object at 0x72a9b09057c0>	Application
haxx	libcurl	7.38.0	<built-in method update of dict object at 0x72a9b09070c0>	Application
haxx	libcurl	7.39	<built-in method update of dict object at 0x72a9b0907000>	Application
haxx	libcurl	7.40.0	<built-in method update of dict object at 0x72a9b0904680>	Application
haxx	libcurl	7.41.0	<built-in method update of dict object at 0x72a9b0907240>	Application
hp	system_management_homepage	*	<built-in method update of dict object at 0x72a9b0905780>	Application
haxx	curl	7.10.6	<built-in method update of dict object at 0x72a9b0904d00>	Application
haxx	curl	7.10.7	<built-in method update of dict object at 0x72a9b0906dc0>	Application
haxx	curl	7.10.8	<built-in method update of dict object at 0x72a9b0906200>	Application
haxx	curl	7.11.0	<built-in method update of dict object at 0x72a9b0906a40>	Application
haxx	curl	7.11.1	<built-in method update of dict object at 0x72a9b0904200>	Application
haxx	curl	7.11.2	<built-in method update of dict object at 0x72a9b0906240>	Application
haxx	curl	7.12.0	<built-in method update of dict object at 0x72a9b0904300>	Application
haxx	curl	7.12.1	<built-in method update of dict object at 0x72a9b09072c0>	Application
haxx	curl	7.12.2	<built-in method update of dict object at 0x72a9b0907940>	Application
haxx	curl	7.12.3	<built-in method update of dict object at 0x72a9b0906780>	Application
haxx	curl	7.13.0	<built-in method update of dict object at 0x72a9b0905040>	Application
haxx	curl	7.13.1	<built-in method update of dict object at 0x72a9b0905900>	Application
haxx	curl	7.13.2	<built-in method update of dict object at 0x72a9b0904c80>	Application
haxx	curl	7.14.0	<built-in method update of dict object at 0x72a9cd0d9040>	Application
haxx	curl	7.14.1	<built-in method update of dict object at 0x72a9cd0d9d00>	Application
haxx	curl	7.15.0	<built-in method update of dict object at 0x72a9cd0db640>	Application
haxx	curl	7.15.1	<built-in method update of dict object at 0x72a9cd0db140>	Application
haxx	curl	7.15.2	<built-in method update of dict object at 0x72a9cd0dadc0>	Application
haxx	curl	7.15.3	<built-in method update of dict object at 0x72a9cd0d9440>	Application
haxx	curl	7.15.4	<built-in method update of dict object at 0x72a9cd0da180>	Application
haxx	curl	7.15.5	<built-in method update of dict object at 0x72a9cd0d9bc0>	Application
haxx	curl	7.16.0	<built-in method update of dict object at 0x72a9cd0db380>	Application
haxx	curl	7.16.1	<built-in method update of dict object at 0x72a9cd0dbac0>	Application
haxx	curl	7.16.2	<built-in method update of dict object at 0x72a9cd0d88c0>	Application
haxx	curl	7.16.3	<built-in method update of dict object at 0x72a9cd0d9300>	Application
haxx	curl	7.16.4	<built-in method update of dict object at 0x72a9cd0da100>	Application
haxx	curl	7.17.0	<built-in method update of dict object at 0x72a9cd0d9340>	Application
haxx	curl	7.17.1	<built-in method update of dict object at 0x72a9cd0dbdc0>	Application
haxx	curl	7.18.0	<built-in method update of dict object at 0x72a9cd0da5c0>	Application
haxx	curl	7.18.1	<built-in method update of dict object at 0x72a9cd0dac80>	Application
haxx	curl	7.18.2	<built-in method update of dict object at 0x72a9cd0d96c0>	Application
haxx	curl	7.19.0	<built-in method update of dict object at 0x72a9cd0dbb80>	Application
haxx	curl	7.19.1	<built-in method update of dict object at 0x72a9cd0db0c0>	Application
haxx	curl	7.19.2	<built-in method update of dict object at 0x72a9cd0d9400>	Application
haxx	curl	7.19.3	<built-in method update of dict object at 0x72a9cd0da340>	Application
haxx	curl	7.19.4	<built-in method update of dict object at 0x72a9cd0d8d80>	Application
haxx	curl	7.19.5	<built-in method update of dict object at 0x72a9cd0d8e40>	Application
haxx	curl	7.19.6	<built-in method update of dict object at 0x72a9cd0dbcc0>	Application
haxx	curl	7.19.7	<built-in method update of dict object at 0x72a9cd0d8b80>	Application
haxx	curl	7.20.0	<built-in method update of dict object at 0x72a9cd0dbc80>	Application
haxx	curl	7.20.1	<built-in method update of dict object at 0x72a9cd0d9700>	Application
haxx	curl	7.21.0	<built-in method update of dict object at 0x72a9cd0d8680>	Application
haxx	curl	7.21.1	<built-in method update of dict object at 0x72a9cd0da740>	Application
haxx	curl	7.21.2	<built-in method update of dict object at 0x72a9cd0db280>	Application
haxx	curl	7.21.3	<built-in method update of dict object at 0x72a9cd0d8d40>	Application
haxx	curl	7.21.4	<built-in method update of dict object at 0x72a9cd0d8840>	Application
haxx	curl	7.21.5	<built-in method update of dict object at 0x72a9cd0da880>	Application
haxx	curl	7.21.6	<built-in method update of dict object at 0x72a9cd0db700>	Application
haxx	curl	7.21.7	<built-in method update of dict object at 0x72a9cd0d8c00>	Application
haxx	curl	7.22.0	<built-in method update of dict object at 0x72a9cd0d9f00>	Application
haxx	curl	7.23.0	<built-in method update of dict object at 0x72a9cd0d9200>	Application
haxx	curl	7.23.1	<built-in method update of dict object at 0x72a9cd0d8ec0>	Application
haxx	curl	7.24.0	<built-in method update of dict object at 0x72a9cd0db200>	Application
haxx	curl	7.25.0	<built-in method update of dict object at 0x72a9cd0db840>	Application
haxx	curl	7.26.0	<built-in method update of dict object at 0x72a9cd0d9f80>	Application
haxx	curl	7.27.0	<built-in method update of dict object at 0x72a9cd0dba00>	Application
haxx	curl	7.28.0	<built-in method update of dict object at 0x72a9cd0db240>	Application
haxx	curl	7.28.1	<built-in method update of dict object at 0x72a9cd0d8280>	Application
haxx	curl	7.29.0	<built-in method update of dict object at 0x72a9cd0d97c0>	Application
haxx	curl	7.30.0	<built-in method update of dict object at 0x72a9cd0d9980>	Application
haxx	curl	7.31.0	<built-in method update of dict object at 0x72a9cd0da140>	Application
haxx	curl	7.32.0	<built-in method update of dict object at 0x72a9cd0d8ac0>	Application
haxx	curl	7.33.0	<built-in method update of dict object at 0x72a9cd0db440>	Application
haxx	curl	7.34.0	<built-in method update of dict object at 0x72a9cd0d86c0>	Application
haxx	curl	7.35.0	<built-in method update of dict object at 0x72a9cd0d8c80>	Application
haxx	curl	7.36.0	<built-in method update of dict object at 0x72a9cd0da4c0>	Application
haxx	curl	7.37.0	<built-in method update of dict object at 0x72a9cd0dba40>	Application
haxx	curl	7.37.1	<built-in method update of dict object at 0x72a9cd0d8600>	Application
haxx	curl	7.38.0	<built-in method update of dict object at 0x72a9cd0db540>	Application
haxx	curl	7.39.0	<built-in method update of dict object at 0x72a9cd0db3c0>	Application
haxx	curl	7.40.0	<built-in method update of dict object at 0x72a9cd0d9180>	Application
haxx	curl	7.41.0	<built-in method update of dict object at 0x72a9cd0da840>	Application
opensuse	opensuse	13.1	<built-in method update of dict object at 0x72a9cd0daa40>	Operating System
opensuse	opensuse	13.2	<built-in method update of dict object at 0x72a9cd0d8580>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:fedoraproject:fedora:21:::::::*`
Yes	`cpe:2.3:o:fedoraproject:fedora:22:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::`
Yes	`cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::`
Yes	`cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*`
Yes	`cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::*`
Yes	`cpe:2.3:o:debian:debian_linux:7.0:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:apple:mac_os_x:10.10.0:::::::*`
Yes	`cpe:2.3:o:apple:mac_os_x:10.10.1:::::::*`
Yes	`cpe:2.3:o:apple:mac_os_x:10.10.2:::::::*`
Yes	`cpe:2.3:o:apple:mac_os_x:10.10.3:::::::*`
Yes	`cpe:2.3:o:apple:mac_os_x:10.10.4:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:haxx:libcurl:7.10.6:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.10.7:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.10.8:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.11.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.11.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.11.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.12.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.12.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.12.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.12.3:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.13.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.13.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.13.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.14.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.14.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.15.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.15.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.15.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.15.3:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.15.4:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.15.5:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.16.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.16.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.16.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.16.3:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.16.4:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.17.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.17.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.18.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.18.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.18.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.3:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.4:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.5:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.6:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.19.7:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.20.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.20.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.2:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.3:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.4:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.5:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.6:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.21.7:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.22.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.23.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.23.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.24.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.25.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.26.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.27.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.28.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.28.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.29.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.30.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.31.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.32.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.33.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.34.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.35.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.36.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.37.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.37.1:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.38.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.39:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.40.0:::::::*`
Yes	`cpe:2.3:a:haxx:libcurl:7.41.0:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:hp:system_management_homepage::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:haxx:curl:7.10.6:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.10.7:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.10.8:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.11.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.11.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.11.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.12.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.12.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.12.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.12.3:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.13.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.13.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.13.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.14.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.14.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.15.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.15.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.15.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.15.3:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.15.4:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.15.5:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.16.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.16.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.16.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.16.3:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.16.4:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.17.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.17.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.18.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.18.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.18.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.3:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.4:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.5:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.6:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.19.7:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.20.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.20.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.2:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.3:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.4:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.5:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.6:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.21.7:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.22.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.23.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.23.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.24.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.25.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.26.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.27.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.28.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.28.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.29.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.30.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.31.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.32.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.33.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.34.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.35.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.36.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.37.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.37.1:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.38.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.39.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.40.0:::::::*`
Yes	`cpe:2.3:a:haxx:curl:7.41.0:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:opensuse:opensuse:13.1:::::::*`
Yes	`cpe:2.3:o:opensuse:opensuse:13.2:::::::*`

References

http://advisories.mageia.org/MGASA-2015-0179.html
Source: [email protected]

Third Party Advisory
http://curl.haxx.se/docs/adv_20150422B.html
Source: [email protected]

Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743
Source: [email protected]
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
Source: [email protected]

Mailing List Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html
Source: [email protected]

Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html
Source: [email protected]

Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html
Source: [email protected]

Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html
Source: [email protected]

Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html
Source: [email protected]
http://marc.info/?l=bugtraq&m=145612005512270&w=2
Source: [email protected]

Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1254.html
Source: [email protected]
http://www.debian.org/security/2015/dsa-3232
Source: [email protected]

Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:219
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2015:220
Source: [email protected]

Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
Source: [email protected]
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Source: [email protected]
http://www.securityfocus.com/bid/74301
Source: [email protected]
http://www.securitytracker.com/id/1032232
Source: [email protected]

Third Party Advisory
http://www.ubuntu.com/usn/USN-2591-1
Source: [email protected]

Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
Source: [email protected]

Vendor Advisory
https://security.gentoo.org/glsa/201509-02
Source: [email protected]
https://support.apple.com/kb/HT205031
Source: [email protected]

Vendor Advisory
http://advisories.mageia.org/MGASA-2015-0179.html
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://curl.haxx.se/docs/adv_20150422B.html
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=145612005512270&w=2
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1254.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2015/dsa-3232
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2015:219
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDVSA-2015:220
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/74301
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id/1032232
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
http://www.ubuntu.com/usn/USN-2591-1
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://security.gentoo.org/glsa/201509-02
Source: af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/kb/HT205031
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory