Oval Definition:oval:org.mitre.oval:def:23998
Revision Date:2014-05-26Version:13
Title:ELSA-2013:0250: elinks security update (Moderate)
Description:The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2012-4545
ELSA-2013:0250-01
Platform(s):Oracle Linux 5
Oracle Linux 6
Product(s):elinks
Definition Synopsis
  • rpm test
  • elinks is earlier than 0:0.12-0.21.pre5.el6_3
  • AND Oracle Linux 6.x
  • OR rpm test
  • Oracle Linux 5.x
  • AND elinks is earlier than 0:0.11.1-8.el5_9
  • BACK