Debian/elinks: unknown

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff

Action: Upgrade elinks to 0.11.1-1.5 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-5034
• https://security-tracker.debian.org/tracker/CVE-2007-5034

published 2007-09-21T20:17:00Z · modified 2026-10-21T17:47:45.469095398Z · JSON