CVE-2007-3564

Publication date 18 July 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
curl 7.04 feisty
Fixed 7.15.5-1ubuntu2.1
6.10 edgy
Fixed 7.15.4-1ubuntu2.2
6.06 LTS dapper
Fixed 7.15.1-1ubuntu2.1

References

Related Ubuntu Security Notices (USN)

Other references