| Severity : |
Medium
|
| Published : |
2011-07-07
|
| Modified : |
2012-02-03
|
| Base Score : |
4.3
|
| Details : |
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
|
| Product/Version : |
Pro 5.0
CGE 5.x
Mobilinux 5.x
Mobilinux 5.0.24
MVL 5 Atom
Pro 5.0.24
MVL 5 OMAP3
MVL 5 OMAP3530
Carrier Grade CGE 6.0
|
|