The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
Configuration 3 (hide)
| 
 | 
History
                    No history.
Information
                Published : 2013-04-29 22:55
Updated : 2016-09-09 01:59
NVD link : CVE-2013-1944
Mitre link : CVE-2013-1944
CVE.ORG link : CVE-2013-1944
JSON object : View
Products Affected
                haxx
- libcurl
- curl
canonical
- ubuntu_linux
CWE
                
                    
                        
                        CWE-200
                        
            Exposure of Sensitive Information to an Unauthorized Actor
