| The Vigil@nce team watches vulnerabilities impacting your computers, and then offers solutions, a database and tools to correct them. |
|
 |
|
|
|
vulnerability note CVE-2012-0036
cURL: two vulnerabilities
Synthesis of the vulnerability
| An attacker can use two vulnerabilities of cURL, in order to inject IMAP/POP3/SMTP commands or to obtain HTTPS cookies. |
Severity: 2/4.
Creation date: 24/01/2012.
|
Impacted products
Description of the vulnerability
Two vulnerabilities were announced in cURL.
The Curl_urldecode() function does not filter special characters such as line feeds. An attacker can therefore force cURL to use an url containing "%0d%0a", in order to inject line feeds in some protocols such as IMAP, POP3 and SMTP. The attacker can then inject new commands. [severity:2/4; adv_20120124, BID-51665, CVE-2012-0036, >]
The bulletin VIGILANCE-VUL-11014 describes a vulnerability of OpenSSL which can be used by an attacker to obtain HTTPS cookies. This vulnerability is corrected in recent versions of OpenSSL, however cURL uses the SSL_OP_ALL bitmask which disables this protection. [severity:1/4; >] |
Share this bulletin
Complete Vigil@nce bulletin
Characteristics
Title: cURL: two vulnerabilities.
Keywords: Curl_urldecode HTTPS IMAP OpenSSL POP3 SMTP SSL_OP_ALL adv_20120124 cURL vulnerabilities.
Identifiers: adv_20120124, BID-51665, CVE-2012-0036, DSA-2398-1, DSA-2398-2, FEDORA-2012-0888, FEDORA-2012-0894, MDVSA-2012:058, openSUSE-SU-2012:0199-1, openSUSE-SU-2012:0229-1, VIGILANCE-VUL-11314.
|
Information sources
Solutions for this vulnerability
Supplements
Vulnerability : CVE-2012-0036
The Curl_urldecode() function does not filter special characters such as line feeds. An attacker can therefore force cURL to use an url containing "%0d%0a", in order to inject line feeds in some protocols such as IMAP, POP3 and SMTP. The attacker can then inject new commands.
Severity: 2/4.
Identifiers: adv_20120124, BID-51665, CVE-2012-0036.
|
|
Vulnerability : CBC IV
The bulletin VIGILANCE-VUL-11014 describes a vulnerability of OpenSSL which can be used by an attacker to obtain HTTPS cookies. This vulnerability is corrected in recent versions of OpenSSL, however cURL uses the SSL_OP_ALL bitmask which disables this protection.
Severity: 1/4.
|
|
Computer vulnerabilities tracking service
Vigil@nce provides computer vulnerability announces. The Vigil@nce vulnerability database contains several thousand vulnerabilities. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications. The technology watch team tracks security threats targeting the computer system.
|
