]> granicus.if.org Git - curl/commit
NTLM: Fix ConnectionExists to compare Proxy credentials
authorIsaac Boukris <iboukris@gmail.com>
Wed, 13 Jan 2016 09:05:51 +0000 (11:05 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Tue, 26 Jan 2016 22:42:55 +0000 (23:42 +0100)
commitd41dcba4e9b69d6b761e3460cc6ae7e8fd8f621f
tree23c1c1339d967eb640e03c2036bdc2f5d08fef51
parent3017d8a8d8849ebd4feae4f5eae037cd55736a61
NTLM: Fix ConnectionExists to compare Proxy credentials

Proxy NTLM authentication should compare credentials when
re-using a connection similar to host authentication, as it
authenticate the connection.

Example:
curl -v -x http://proxy:port http://host/ -U good_user:good_pwd
  --proxy-ntlm --next -x http://proxy:port http://host/
    [-U fake_user:fake_pwd --proxy-ntlm]

CVE-2016-0755

Bug: http://curl.haxx.se/docs/adv_20160127A.html
lib/url.c