CVE-2007-5034

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-21 · updated 2026-06-16
Weakness: CWE-200

Description

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.

Affected products

Elinks: through 0.11.1; through 0.11.2

References

http://bugzilla.elinks.cz/show_bug.cgi?id=937
http://secunia.com/advisories/26936
http://secunia.com/advisories/26949
http://secunia.com/advisories/26956
http://secunia.com/advisories/27038
http://secunia.com/advisories/27062
http://secunia.com/advisories/27125
http://secunia.com/advisories/27132
http://www.debian.org/security/2007/dsa-1380
http://www.redhat.com/support/errata/RHSA-2007-0933.html
http://www.securityfocus.com/archive/1/481606/100/0/threaded
http://www.securityfocus.com/bid/25799

Get alerted when CVE-2007-5034 or the next vulnerability affects your stack