CVE-2012-4545 in ELinks
요약 (영어)
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2012. 08. 21.
공개
2013. 01. 02.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 63300 | ELinks http_negotiate_create_context 약한 인증 | 287 | 정의되지 않음 | 정의되지 않음 | CVE-2012-4545 |