Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Haxx libcurl 信任管理问题漏洞
Vulnerability Description
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。 libcurl 7.10.6至7.21.6版本存在信任管理问题漏洞，该漏洞源于http_negotiate.c中的Curl_input_negotiate函数在GSSAPI认证过程中无条件地执行认证授权。远程攻击者可借助GSSAPI请求进行欺骗攻击，获取客户端的安全证书，恶意服务器可通过使用相同的GSSAPI机制来模仿其他服务器的客户端。
CVSS Information
N/A
Vulnerability Type
N/A