CVE-2013-1944

Published: Apr 29, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Affected (131)

Products: Haxx: Curl, Libcurl · Canonical: Ubuntu Linux

2 products

1 product

Configuration A

102 vulnerable

Vulnerable Software	Affected Versions
Haxx Curl	Up to 7.29.0
Haxx Curl	Version 6.0
Haxx Curl	Version 6.1
Haxx Curl	Version 6.1 beta
Haxx Curl	Version 6.2
Haxx Curl	Version 6.3.1
Haxx Curl	Version 6.3
Haxx Curl	Version 6.4
Haxx Curl	Version 6.5.1
Haxx Curl	Version 6.5.2
Haxx Curl	Version 6.5
Haxx Curl	Version 7.1.1
Haxx Curl	Version 7.10.1
Haxx Curl	Version 7.10.2
Haxx Curl	Version 7.10.3
Haxx Curl	Version 7.10.4
Haxx Curl	Version 7.10.5
Haxx Curl	Version 7.10.6
Haxx Curl	Version 7.10.7
Haxx Curl	Version 7.10.8
Haxx Curl	Version 7.10
Haxx Curl	Version 7.11.0
Haxx Curl	Version 7.11.1
Haxx Curl	Version 7.11.2
Haxx Curl	Version 7.12.0
Haxx Curl	Version 7.12.1
Haxx Curl	Version 7.12.2
Haxx Curl	Version 7.12.3
Haxx Curl	Version 7.13.0
Haxx Curl	Version 7.13.1
Haxx Curl	Version 7.13.2
Haxx Curl	Version 7.14.0
Haxx Curl	Version 7.14.1
Haxx Curl	Version 7.15.0
Haxx Curl	Version 7.15.1
Haxx Curl	Version 7.15.2
Haxx Curl	Version 7.15.3
Haxx Curl	Version 7.15.4
Haxx Curl	Version 7.15.5
Haxx Curl	Version 7.16.0
Haxx Curl	Version 7.16.1
Haxx Curl	Version 7.16.2
Haxx Curl	Version 7.16.3
Haxx Curl	Version 7.16.4
Haxx Curl	Version 7.17.0
Haxx Curl	Version 7.17.1
Haxx Curl	Version 7.18.0
Haxx Curl	Version 7.18.1
Haxx Curl	Version 7.18.2
Haxx Curl	Version 7.19.0
Haxx Curl	Version 7.19.1
Haxx Curl	Version 7.19.2
Haxx Curl	Version 7.19.3
Haxx Curl	Version 7.19.4
Haxx Curl	Version 7.19.5
Haxx Curl	Version 7.19.6
Haxx Curl	Version 7.19.7
Haxx Curl	Version 7.1
Haxx Curl	Version 7.2.1
Haxx Curl	Version 7.20.0
Haxx Curl	Version 7.20.1
Haxx Curl	Version 7.21.0
Haxx Curl	Version 7.21.1
Haxx Curl	Version 7.21.2
Haxx Curl	Version 7.21.3
Haxx Curl	Version 7.21.4
Haxx Curl	Version 7.21.5
Haxx Curl	Version 7.21.6
Haxx Curl	Version 7.21.7
Haxx Curl	Version 7.22.0
Haxx Curl	Version 7.23.0
Haxx Curl	Version 7.23.1
Haxx Curl	Version 7.24.0
Haxx Curl	Version 7.25.0
Haxx Curl	Version 7.26.0
Haxx Curl	Version 7.27.0
Haxx Curl	Version 7.28.0
Haxx Curl	Version 7.28.1
Haxx Curl	Version 7.2
Haxx Curl	Version 7.3
Haxx Curl	Version 7.4.1
Haxx Curl	Version 7.4.2
Haxx Curl	Version 7.4
Haxx Curl	Version 7.5.1
Haxx Curl	Version 7.5.2
Haxx Curl	Version 7.6.1
Haxx Curl	Version 7.6
Haxx Curl	Version 7.7.1
Haxx Curl	Version 7.7.2
Haxx Curl	Version 7.7.3
Haxx Curl	Version 7.7
Haxx Curl	Version 7.8.1
Haxx Curl	Version 7.8
Haxx Curl	Version 7.9.1
Haxx Curl	Version 7.9.2
Haxx Curl	Version 7.9.3
Haxx Curl	Version 7.9.4
Haxx Curl	Version 7.9.5
Haxx Curl	Version 7.9.6
Haxx Curl	Version 7.9.7
Haxx Curl	Version 7.9.8
Haxx Curl	Version 7.9

Configuration B

24 vulnerable

Vulnerable Software	Affected Versions
Haxx Libcurl	Up to 7.29.0
Haxx Libcurl	Version 7.14.0
Haxx Libcurl	Version 7.14.1
Haxx Libcurl	Version 7.15.0
Haxx Libcurl	Version 7.15.1
Haxx Libcurl	Version 7.15.2
Haxx Libcurl	Version 7.15.3
Haxx Libcurl	Version 7.15.4
Haxx Libcurl	Version 7.15.5
Haxx Libcurl	Version 7.16.0
Haxx Libcurl	Version 7.16.2
Haxx Libcurl	Version 7.16.3
Haxx Libcurl	Version 7.16.4
Haxx Libcurl	Version 7.17.0
Haxx Libcurl	Version 7.17.1
Haxx Libcurl	Version 7.18.0
Haxx Libcurl	Version 7.18.2
Haxx Libcurl	Version 7.19.3
Haxx Libcurl	Version 7.20.0
Haxx Libcurl	Version 7.21.2
Haxx Libcurl	Version 7.22.0
Haxx Libcurl	Version 7.23.0
Haxx Libcurl	Version 7.28.0
Haxx Libcurl	Version 7.28.1

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 8.04