VDB
DEBIAN-CVE-2011-2192
DEBIAN-CVE-2011-2192
PUBLISHED
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | curl | 0 |
| Debian:14 | curl | 0 |
| Debian:13 | curl | 0 |
Timeline
- Jul 7, 2011 CVE Published
- Oct 23, 2026 CVE Updated