CVE-2003-1605

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-255

Affected software

No affected versions have been published.

Timeline

Published
Aug 23, 2018
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2003

CVE-2003-200015.6An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an eCVE-2003-50019.8A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site ScripCVE-2003-50025.3A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the componenCVE-2003-50036.1A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The
CVE-2003-1605: High severity, CVSS 7.5 | Vulnix