CVE-2014-3613

Synopsis Moderate: curl security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated curl packages that fix multiple security issues, several bugs, andadd two enhancements are now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as ...

Several security issues were fixed in curl ...

Two vulnerabilities have been discovered in cURL, an URL transfer library They can be use to leak cookie information: CVE-2014-3613 By not detecting and rejecting domain names for partial literal IP addresses properly when parsing received HTTP cookies, libcurl can be fooled to both sending cookies to wrong sites and into allowing ...

libcurl wrongly allows cookies to be set for TLDs, thus making them much broader then they are supposed to be allowed to This can allow arbitrary sites to set cookies that then would get sent to a different and unrelated site or domain By not detecting and rejecting domain names for partial literal IP addresses properly when parsing received HTTP ...

It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issues easier to exploit ...