CVE-2012-4545
Description
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.473
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| elinks security update(DSA-2592-1) elinks_0.12~pre5-9_i386.deb | Linux |
| elinks security update(DSA-2592-1) elinks_0.12~pre5-9_amd64.deb | Linux |
| Elinks 0.12 pre5-9 for Debian GNU/Linux 7 (wheezy) (x64) elinks_0.12~pre5-9_amd64.deb | Linux |
| Elinks 0.12 pre5-9 for Debian GNU/Linux 7 (wheezy) elinks_0.12~pre5-9_i386.deb | Linux |
| Elinks update (CESA-2013:0250) elinks-0.12-0.21.pre5.el6_3.i686.rpm | Linux |
| Elinks update (CESA-2013:0250) elinks-0.12-0.21.pre5.el6_3.x86_64.rpm | Linux |
| (RHSA-2013:0250) Moderate: elinks security update elinks-0.11.1-8.el5_9.i386.rpm | Linux |
| (RHSA-2013:0250) Moderate: elinks security update elinks-0.11.1-8.el5_9.x86_64.rpm | Linux |
| (RHSA-2013:0250) Moderate: elinks security update elinks-0.12-0.21.pre5.el6_3.i686.rpm | Linux |
| (RHSA-2013:0250) Moderate: elinks security update elinks-0.12-0.21.pre5.el6_3.x86_64.rpm | Linux |
| Elinks update (ELSA-2013-0250) elinks-0.12-0.21.pre5.el6_3.x86_64.rpm | Linux |
| Elinks update (ELSA-2013-0250) elinks-0.12-0.21.pre5.el6_3.i686.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234