CVE-2011-2192
Summary
by MITRE
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 11/14/2021
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxx'x Xxxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxxxxxx, Xxxxxxxxxxxx Xx Xxx Xxxx_xxxxx_xxxxxxxxx Xxxxxxxx Xxxxxxx Xx Xxxx_xxxxxxxxx.x. Xxxx Xxxx Xxxxxxx Xxxxxxxx X.xx.x Xxxxxxx X.xx.x Xx Xxx Xxxxxxx Xxx Xxx Xxxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxx Xxxxxxx-xxxx Xxxx Xxx Xxxxxxx Xxx Xxxxxxx. Xxx Xxxxx Xxxxx Xxxx Xxx Xxxxxxx'x Xxxxxxxx Xx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxx Xxxxx Xx Xxxxxxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxx Xxxxxx'x Xxxxxxxxxxxxxx Xxxxxxxxxxxx Xx Xxx Xxxxxx'x Xxxxxxxx Xxxxxxxxxxx. Xxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxxx Xx Xxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxxx Xxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxxxx Xxxxxx Xxxx Xxxxxxxxxxxx. Xxxx X Xxxxxx Xxxxxxxxxxx X Xxxxxxxxxx Xxxx X Xxxxxx Xxxx Xxxxxxxx Xxxxxx Xxxxxxxxxxxxxx, Xxx Xxxxxxx Xxxxxxxxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxx Xxxxxx'x Xxxxxxxxxxx Xx Xxx Xxxxxx Xx Xxxx Xx Xxx Xxxxxxxxxxxxxx Xxxxxxx. Xxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxxxx Xx Xxxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxxx Xx Xxxxxxx Xxx Xxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxx Xxxxx Xx Xxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxxxxx Xxxxxxx Xxx Xxxxxxx Xxxxxxx X Xxxxxxxxx Xxxx Xxxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx, Xxxxxxxx Xx Xxxxxx Xxxxxxx Xxxxx Xxxxxxxxx Xxxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxx Xx Xxxxxxxxxxx Xxxxxxxxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxx Xxxx Xx Xxx-xxx Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxx Xxx Xxxxxx Xxxxx Xx Xxxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxxxxx Xxxxx Xx Xxxxxxxxx Xxxx Xxxxxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxx Xxxxxxxxxxx. Xx Xxxxxxxx Xxx Xxxxxxxx X Xxxxxxxxx Xxxx Xxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxxxxxxx Xx Xxxxxx Xxx Xxxxx Xxxxxx Xxxxxxxxxxx Xxx Xxxxxxxxxxxxxx Xxxxxxx Xxxxx Xxxxxxxx Xxxx Xxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx. Xxxx Xxxxxxx X Xxxxx Xxxxxxxx Xxxxx Xxxxxxxxxxx Xxxxxx Xxxxxxxxxxx Xxx Xx Xxxx Xx Xxxxxx Xxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxx Xxx Xxxxxxx, Xxxxxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxx Xxx Xxxxxxxxxx Xxxxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxx Xxxxx Xxx Xxxx Xxxxxxxx Xxxxxxxxxx Xxx Xxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxx Xxxx Xxx Xxxxxx Xxxx-xx Xxxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxxxx Xxxx Xxxx X Xxxxxx Xxxxxxxx Xx X Xxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxx Xxxxxxxxxxxxxx, Xxxxxx Xx X Xxxxxxxxxxx Xxxx Xxx Xxx Xxxxxx Xxxx Xxxx Xxxxxxx Xxx Xxxx Xxxxxxxxxxxxxx Xxx Xxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxx Xxxxx Xx Xxxx Xxxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxxxx. Xxx Xxxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxx X.xx.x Xx Xxxxx Xxxxx Xxx Xxxxxxxxxxxxx Xxx Xxxx Xxxxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxxx Xxxx Xxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxxxxxxx Xxxxxxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxxx Xx Xx Xxx Xxxxxxxx Xxxxxxxx, Xxx Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxx Xxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxxxxxx Xxxxx. Xxxxxxxxxxxx, Xxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxx-xxxxx Xxxxxxxxxxx Xxxx Xx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxx Xxx Xxxxxx Xxx Xxxxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxx Xx Xxxxxxxx-xxxxxxxxx Xxxxxxxxxxxx, Xxxxxxxx Xxxx Xxx&xx Xxxxxxxxx Xxxxx.xxx Xxx Xxx Xx Xxxxxx Xxxxxxxxxxx Xxx Xxxxx.xxx Xxx Xxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxxxxxx Xxxxxxx.