CVE ID:	CVE-2014-0015
Description:	cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
Test IDs:	1.3.6.1.4.1.25623.1.0.841706   1.3.6.1.4.1.25623.1.0.867314   1.3.6.1.4.1.25623.1.0.871169   1.3.6.1.4.1.25623.1.0.881936   1.3.6.1.4.1.25623.1.0.702849   1.3.6.1.4.1.25623.1.0.120207   1.3.6.1.4.1.25623.1.0.120160   1.3.6.1.4.1.25623.1.0.120642   1.3.6.1.4.1.25623.1.1.4.2014.0171.1   1.3.6.1.4.1.25623.1.1.4.2014.0175.2   1.3.6.1.4.1.25623.1.1.4.2014.0175.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0015 http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html BugTraq ID: 65270 http://www.securityfocus.com/bid/65270 Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/534161/100/0/threaded Debian Security Information: DSA-2849 (Google Search) http://www.debian.org/security/2014/dsa-2849 http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128408.html http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127627.html http://seclists.org/fulldisclosure/2014/Dec/23 http://www.securitytracker.com/id/1029710 http://secunia.com/advisories/56728 http://secunia.com/advisories/56731 http://secunia.com/advisories/56734 http://secunia.com/advisories/56912 http://secunia.com/advisories/59458 http://secunia.com/advisories/59475 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.502652 SuSE Security Announcement: openSUSE-SU-2014:0274 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html http://www.ubuntu.com/usn/USN-2097-1