CVE Vulnerabilities

CVE-2007-3564

Published: Jul 18, 2007 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.

Affected Software

Name Vendor Start Version End Version
Libcurl Libcurl 7.14 7.14
Libcurl Libcurl 7.14.1 7.14.1
Libcurl Libcurl 7.15 7.15
Libcurl Libcurl 7.15.1 7.15.1
Libcurl Libcurl 7.15.2 7.15.2
Libcurl Libcurl 7.15.3 7.15.3
Libcurl Libcurl 7.16.3 7.16.3
Curl Ubuntu dapper *
Curl Ubuntu devel *
Curl Ubuntu edgy *
Curl Ubuntu feisty *

References