CVE-2013-1944 Information disclosure in n/a
Remote attackers can steal cookies by exploiting improper domain matching in cURL, requiring user interaction to visit a malicious URL.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2013-1944?
CVE-2013-1944 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 29 Apr 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Weakness: CWE-200
Which versions are affected by CVE-2013-1944?
It affects 3 products.
Linux distribution packages (19)
curl Red Hat:enterprise_linux:5::server | All versions | 0:7.15.5-16.el5_9 |
curl-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:7.15.5-16.el5_9 |
curl-devel Red Hat:enterprise_linux:5::server | All versions | 0:7.15.5-16.el5_9 |
curl Red Hat:enterprise_linux:6::client | All versions | 0:7.19.7-36.el6_4 |
curl-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:7.19.7-36.el6_4 |
libcurl Red Hat:enterprise_linux:6::client | All versions | 0:7.19.7-36.el6_4 |
libcurl-devel Red Hat:enterprise_linux:6::client | All versions | 0:7.19.7-36.el6_4 |
curl Red Hat:enterprise_linux:6::computenode | All versions | 0:7.19.7-36.el6_4 |
curl-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:7.19.7-36.el6_4 |
libcurl Red Hat:enterprise_linux:6::computenode | All versions | 0:7.19.7-36.el6_4 |
libcurl-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:7.19.7-36.el6_4 |
curl Red Hat:enterprise_linux:6::server | All versions | 0:7.19.7-36.el6_4 |
curl-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:7.19.7-36.el6_4 |
libcurl Red Hat:enterprise_linux:6::server | All versions | 0:7.19.7-36.el6_4 |
libcurl-devel Red Hat:enterprise_linux:6::server | All versions | 0:7.19.7-36.el6_4 |
curl Red Hat:enterprise_linux:6::workstation | All versions | 0:7.19.7-36.el6_4 |
curl-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:7.19.7-36.el6_4 |
libcurl Red Hat:enterprise_linux:6::workstation | All versions | 0:7.19.7-36.el6_4 |
libcurl-devel Red Hat:enterprise_linux:6::workstation | All versions | 0:7.19.7-36.el6_4 |
Products include Canonical Ubuntu Linux, Haxx Curl, Haxx Libcurl.
How do I fix CVE-2013-1944?
Upgrade to a fixed version.
Is CVE-2013-1944 being exploited?
There is no known exploitation of CVE-2013-1944 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as CURL-CVE-2013-1944, DEBIAN-CVE-2013-1944, DSA-2660-1, GHSA-q8gg-xjf7-2v3w, RHSA-2013:0771.