Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ELinks 授权问题漏洞
Vulnerability Description
ELinks是一款Linux系统下的开源纯文本浏览器。 ELinks 0.12pre6之前的0.12版本中的protocol/http/http_negotiate.c中的http_negotiate_create_context函数中存在漏洞。当使用HTTP Negotiate或GSS-Negotiate认证时，程序通过GSSAPI来为用户授权证书。通过已授权的证书，远程服务器端攻击者利用该漏洞作为客户验证。
CVSS Information
N/A
Vulnerability Type
N/A