Gentoo: GLSA-200903-21 Normal: cURL Arbitrary File Access

Gentoo Linux Security Advisory GLSA 200903-21 https://security.gentoo.org/ Severity: Normal Title: cURL: Arbitrary file access Date: March 09, 2009 Bugs: #260361 ID: 200903-21

Synopsis ======= A vulnerability in cURL may allow for arbitrary file access.
Background ========= cURL is a command line tool for transferring files with URL syntax, supporting numerous protocols.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/curl < 7.19.4 >= 7.19.4
========== David Kierznowski reported that the redirect implementation accepts arbitrary Location values when CURLOPT_FOLLOWLOCATION is enabled.
Impact ===== A remote attacker could possibly exploit this v...