Unrated severityNVD Advisory· Published Jan 3, 2013· Updated Jun 16, 2026
CVE-2012-4545
CVE-2012-4545
Description
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:elinks:elinks:0.12:pre1:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:elinks:elinks:0.12:pre1:*:*:*:*:*:*
- cpe:2.3:a:elinks:elinks:0.12:pre2:*:*:*:*:*:*
- cpe:2.3:a:elinks:elinks:0.12:pre3:*:*:*:*:*:*
- cpe:2.3:a:elinks:elinks:0.12:pre4:*:*:*:*:*:*
- cpe:2.3:a:elinks:elinks:0.12:pre5:*:*:*:*:*:*
- (no CPE)range: <0.12pre6
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/51569nvdVendor Advisory
- bugzilla.elinks.cz/show_bug.cginvd
- repo.or.cz/w/elinks.git/blobdiff/89056e21fc7ab8e1c2d4e06ec9d0c6d01e70669a..da18694ff7dd0b67dfcb3c417fb0579b1e7d02d7:/src/protocol/http/http_negotiate.cnvd
- rhn.redhat.com/errata/RHSA-2013-0250.htmlnvd
- www.debian.org/security/2012/dsa-2592nvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/bid/57065nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/80882nvd
News mentions
0No linked articles in our index yet.