Test ID:	1.3.6.1.4.1.25623.1.1.2.2019.2566
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-2566)
Summary:	The remote host is missing an update for the Huawei EulerOS 'curl' package(s) announced via the EulerOS-SA-2019-2566 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'curl' package(s) announced via the EulerOS-SA-2019-2566 advisory. Vulnerability Insight: The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.(CVE-2015-3153) Affected Software/OS: 'curl' package(s) on Huawei EulerOS V2.0SP3. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3153 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html BugTraq ID: 74408 http://www.securityfocus.com/bid/74408 Debian Security Information: DSA-3240 (Google Search) http://www.debian.org/security/2015/dsa-3240 http://www.securitytracker.com/id/1032233 SuSE Security Announcement: openSUSE-SU-2015:0861 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html http://www.ubuntu.com/usn/USN-2591-1
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.