cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - curl: NTLM password overflow via integer overflow (CVE-2018-14618)

  - cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM     connections, which might allow context-dependent attackers to authenticate as other users via a request.
    (CVE-2014-0015)

  - The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3,     (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might     allow context-dependent attackers to connect as other users via a request, a similar issue to     CVE-2014-0015. (CVE-2014-0138)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A heap use-after-free flaw was found in curl versions     from 7.59.0 through 7.61.1 in the code related to     closing an easy handle. When closing and cleaning up an     'easy' handle in the `Curl_close()` function, the     library code first frees a struct (without nulling the     pointer) and might then subsequently erroneously write     to a struct field within that already freed     struct.(CVE-2018-16840)

  - cURL and libcurl 7.18.0 through 7.32.0, when built with     OpenSSL, disables the certificate CN and SAN name field     verification (CURLOPT_SSL_VERIFYHOST) when the digital     signature verification (CURLOPT_SSL_VERIFYPEER) is     disabled, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid     certificate.(CVE-2013-4545)

  - The GnuTLS backend in libcurl 7.21.4 through 7.33.0,     when disabling digital signature verification     (CURLOPT_SSL_VERIFYPEER), also disables the     CURLOPT_SSL_VERIFYHOST check for CN or SAN host name     fields, which makes it easier for remote attackers to     spoof servers and conduct man-in-the-middle (MITM)     attacks.(CVE-2013-6422)

  - cURL and libcurl 7.1 before 7.36.0, when using the     OpenSSL, axtls, qsossl or gskit libraries for TLS,     recognize a wildcard IP address in the subject's Common     Name (CN) field of an X.509 certificate, which might     allow man-in-the-middle attackers to spoof arbitrary     SSL servers via a crafted certificate issued by a     legitimate Certification Authority.(CVE-2014-0139)

  - The (1) mbed_connect_step1 function in     lib/vtls/mbedtls.c and (2) polarssl_connect_step1     function in lib/vtls/polarssl.c in cURL and libcurl     before 7.49.0, when using SSLv3 or making a TLS     connection to a URL that uses a numerical IP address,     allow remote attackers to spoof servers via an     arbitrary valid certificate.(CVE-2016-3739)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - cURL and libcurl 7.18.0 through 7.32.0, when built with     OpenSSL, disables the certificate CN and SAN name field     verification (CURLOPT_SSL_VERIFYHOST) when the digital     signature verification (CURLOPT_SSL_VERIFYPEER) is     disabled, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid     certificate.i1/4^CVE-2013-4545i1/4%0

  - The GnuTLS backend in libcurl 7.21.4 through 7.33.0,     when disabling digital signature verification     (CURLOPT_SSL_VERIFYPEER), also disables the     CURLOPT_SSL_VERIFYHOST check for CN or SAN host name     fields, which makes it easier for remote attackers to     spoof servers and conduct man-in-the-middle (MITM)     attacks.i1/4^CVE-2013-6422i1/4%0

  - cURL and libcurl 7.1 before 7.36.0, when using the     OpenSSL, axtls, qsossl or gskit libraries for TLS,     recognize a wildcard IP address in the subject's Common     Name (CN) field of an X.509 certificate, which might     allow man-in-the-middle attackers to spoof arbitrary     SSL servers via a crafted certificate issued by a     legitimate Certification Authority.i1/4^CVE-2014-0139i1/4%0

  - curl and libcurl 7.27.0 through 7.35.0, when running on     Windows and using the SChannel/Winssl TLS backend, does     not verify that the server hostname matches a domain     name in the subject's Common Name (CN) or     subjectAltName field of the X.509 certificate when     accessing a URL that uses a numerical IP address, which     allows man-in-the-middle attackers to spoof servers via     an arbitrary valid certificate.i1/4^CVE-2014-2522i1/4%0

  - The ourWriteOut function in tool_writeout.c in curl     7.53.1 might allow physically proximate attackers to     obtain sensitive information from process memory in     opportunistic circumstances by reading a workstation     screen during use of a --write-out argument ending in a     '%' character, which leads to a heap-based buffer     over-read.i1/4^CVE-2017-7407i1/4%0

  - It was found that curl and libcurl might send their     Authentication header to a third party HTTP server upon     receiving an HTTP REDIRECT reply. This could leak     authentication token to external     entities.i1/4^CVE-2018-1000007i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the web server's banner, the version of HP System Management Homepage (SMH) hosted on the remote web server is prior to 7.2.6. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries :

  - HP SMH (XSRF)
    - libcurl
    - OpenSSL

Updated lftp packages fix security vulnerability :

lftp incorrectly validates wildcard SSL certificates containing literal IP addresses, so under certain conditions, it would allow and use a wildcard match specified in the CN field, allowing a malicious server to participate in a MITM attack or just fool users into believing that it is a legitimate site (CVE-2014-0139).

lftp was affected by this issue as it uses code from cURL for checking SSL certificates. The curl package was fixed in MDVSA-2015:098.

Updated curl packages fix security vulnerabilities :

Paras Sethia discovered that libcurl would sometimes mix up multiple HTTP and HTTPS connections with NTLM authentication to the same server, sending requests for one user over the connection authenticated as a different user (CVE-2014-0015).

libcurl can in some circumstances re-use the wrong connection when asked to do transfers using other protocols than HTTP and FTP, causing a transfer that was initiated by an application to wrongfully re-use an existing connection to the same server that was authenticated using different credentials (CVE-2014-0138).

libcurl incorrectly validates wildcard SSL certificates containing literal IP addresses, so under certain conditions, it would allow and use a wildcard match specified in the CN field, allowing a malicious server to participate in a MITM attack or just fool users into believing that it is a legitimate site (CVE-2014-0139).

In cURL before 7.38.0, libcurl can be fooled to both sending cookies to wrong sites and into allowing arbitrary sites to set cookies for others. For this problem to trigger, the client application must use the numerical IP address in the URL to access the site (CVE-2014-3613).

In cURL before 7.38.0, libcurl wrongly allows cookies to be set for Top Level Domains (TLDs), thus making them apply broader than cookies are allowed. This can allow arbitrary sites to set cookies that then would get sent to a different and unrelated site or domain (CVE-2014-3620).

Symeon Paraschoudis discovered that the curl_easy_duphandle() function in cURL has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires CURLOPT_COPYPOSTFIELDS and curl_easy_duphandle() to be used in that order, and then the duplicate handle must be used to perform the HTTP POST. The curl command line tool is not affected by this problem as it does not use this sequence (CVE-2014-3707).

When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. If the given URL contains line feeds and carriage returns those will be sent along to the proxy too, which allows the program to for example send a separate HTTP request injected embedded in the URL (CVE-2014-8150).

The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.16 / 8.0.0.x prior to 8.0.0.13 / 8.0.1.x prior to 8.0.1.6 installed. It is, therefore, potentially affected by multiple vulnerabilities in third party libraries :

  - An error exists in the libcURL and OpenSSL libraries     related to an IP address that uses a wildcard in the     subject's Common Name (CN) field of an X.509     certificate. A man-in-the-middle attacker can exploit     this issue to spoof SSL servers. (CVE-2014-0139)

  - An error exists in the OpenSSL library related to     'ec point format extension' handling and multithreaded     clients that allows freed memory to be overwritten     during a resumed session. (CVE-2014-3509)  
  - An error exists in the OpenSSL library related to     handling fragmented 'ClientHello' messages that allow a     man-in-the-middle attacker to force usage of TLS 1.0     regardless of higher protocol levels being supported by     both the server and the client. (CVE-2014-3511)

  - A man-in-the-middle (MitM) information disclosure     vulnerability known as POODLE. The vulnerability is due     to the way SSL 3.0 handles padding bytes when decrypting     messages encrypted using block ciphers in cipher block     chaining (CBC) mode. MitM attackers can decrypt a     selected byte of a cipher text in as few as 256 tries if     they are able to force a victim application to     repeatedly send the same data over newly created SSL 3.0     connections. (CVE-2014-3566)

  - An information disclosure flaw exists in the Java     library within the     'share/classes/sun/security/rsa/RSACore.java' class     related to 'RSA blinding' caused during operations using     private keys and measuring timing differences. This     allows a remote attacker to gain information about used     keys. (CVE-2014-4244)

  - A flaw exists in the Java library within the     'validateDHPublicKey' function in the     'share/classes/sun/security/util/KeyUtil.java' class     which is triggered during the validation of     Diffie-Hellman public key parameters. This allows a     remote attacker to recover a key. (CVE-2014-4263)

  - A NULL pointer dereference error exists in the OpenSSL     library related to handling Secure Remote Password     protocol (SRP) that allows a malicious server to crash a     client, resulting in a denial of service.
    (CVE-2014-5139)

The remote host is affected by the vulnerability described in GLSA-201406-21 (cURL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in cURL. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause a man-in-the-middle attack via a crafted       certificate issued by a legitimate certification authority. Furthermore,       a context-dependent attacker may be able to bypass security restrictions       by connecting as other users.
  Workaround :

    There is no known workaround at this time.

This curl update fixes two security issues :

  - bnc#868627: Fixed wrong re-use of connections     (CVE-2014-0138).

  - bnc#868629: Fixed IP address wildcard certificate     validation (CVE-2014-0139).

Updated curl packages fix security vulnerabilities :

Paras Sethia discovered that libcurl would sometimes mix up multiple HTTP and HTTPS connections with NTLM authentication to the same server, sending requests for one user over the connection authenticated as a different user (CVE-2014-0015).

libcurl can in some circumstances re-use the wrong connection when asked to do transfers using other protocols than HTTP and FTP, causing a transfer that was initiated by an application to wrongfully re-use an existing connection to the same server that was authenticated using different credentials (CVE-2014-0138).

libcurl incorrectly validates wildcard SSL certificates containing literal IP addresses, so under certain conditions, it would allow and use a wildcard match specified in the CN field, allowing a malicious server to participate in a MITM attack or just fool users into believing that it is a legitimate site (CVE-2014-0139).

- Update to 7.37.0

    - Fixes CVE-2014-0138 and CVE-2014-0139 (RHBZ #1080880)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This curl update fixes the following security issues :

  - wrong re-use of connections. (CVE-2014-0138).
    (bnc#868627)

  - IP address wildcard certificate validation.
    (CVE-2014-0139). (bnc#868629)

  - --insecure option inappropriately enforcing security     safeguard. (bnc#870444)

Steve Holme discovered that libcurl incorrectly reused wrong connections when using protocols other than HTTP and FTP. This could lead to the use of unintended credentials, possibly exposing sensitive information. (CVE-2014-0138)

Richard Moore discovered that libcurl incorrectly validated wildcard SSL certificates that contain literal IP addresses. An attacker could possibly exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications.
(CVE-2014-0139).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two vulnerabilities have been discovered in cURL, an URL transfer library. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2014-0138     Steve Holme discovered that libcurl can in some     circumstances re-use the wrong connection when asked to     do transfers using other protocols than HTTP and FTP.

  - CVE-2014-0139     Richard Moore from Westpoint Ltd. reported that libcurl     does not behave compliant to RFC 2828 under certain     conditions and incorrectly validates wildcard SSL     certificates containing literal IP addresses.

Versions of cURL/libcURL older than 7.35.0 are unpatched for the following vulnerabilities:

  - Security-bypass vulnerability because recent authenticated connections are allowed to be re-used, which an attacker can leverage to perform certain operations with the credentials of a recently authenticated user. (CVE-2014-0138)

  - SSL certificate validation error wherein an IP address containing wildcard characters within the Common Name field is not properly validated; this can be leveraged for man-in-the-middle attacks or trusted server impersonation. (CVE-2014-0139)

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues.

ID	Name	Product	Family	Severity
198477	RHEL 5 : curl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
137468	EulerOS 2.0 SP2 : curl (EulerOS-SA-2020-1626)	Nessus	Huawei Local Security Checks	critical
123858	EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)	Nessus	Huawei Local Security Checks	critical
90251	HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)	Nessus	Web Servers	high
83155	Mandriva Linux Security Advisory : lftp (MDVSA-2015:213)	Nessus	Mandriva Local Security Checks	medium
82351	Mandriva Linux Security Advisory : curl (MDVSA-2015:098)	Nessus	Mandriva Local Security Checks	medium
81784	IBM Rational ClearQuest 7.1.x < 7.1.2.16 / 8.0.0.x < 8.0.0.13 / 8.0.1.x < 8.0.1.6 Multiple Vulnerabilities (credentialed check) (POODLE)	Nessus	Windows	low
76180	GLSA-201406-21 : cURL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
75339	openSUSE Security Update : curl (openSUSE-SU-2014:0598-1)	Nessus	SuSE Local Security Checks	medium
74418	Mandriva Linux Security Advisory : curl (MDVSA-2014:110)	Nessus	Mandriva Local Security Checks	medium
74408	Fedora 19 : mingw-curl-7.37.0-1.fc19 (2014-6921)	Nessus	Fedora Local Security Checks	medium
74406	Fedora 20 : mingw-curl-7.37.0-1.fc20 (2014-6912)	Nessus	Fedora Local Security Checks	medium
74115	SuSE 11.3 Security Update : curl (SAT Patch Number 9133)	Nessus	SuSE Local Security Checks	medium
73514	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : curl vulnerabilities (USN-2167-1)	Nessus	Ubuntu Local Security Checks	medium
73486	Debian DSA-2902-1 : curl - security update	Nessus	Debian Local Security Checks	medium
8178	cURL/libcURL 7.x < 7.35.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
73247	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : curl (SSA:2014-086-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2014-0139

critical

Tenable Plugins

critical

critical

critical

high

medium

medium

low

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium