Vulnerabilities in curl 5.2.1

curl version 5.2.1 was released on December 14 1998

It has the following 11 published security problems.

Flaw	From version	To and including
control code in cookie denial of service	4.9	7.84.0
Auth/cookie leak on redirect	4.9	7.82.0
Credential leak on redirect	4.9	7.82.0
trusting FTP PASV responses	4.0	7.73.0
cookie injection for other servers	4.9	7.50.3
TLS session resumption client cert bypass	5.0	7.50.0
remote filename path traversal in curl tool for Windows	4.0	7.46.0
sensitive HTTP server headers also sent to proxies	4.0	7.42.0
cookie leak with IP address as domain	4.0	7.37.1
cookie domain tailmatch	4.7	7.29.0
Proxy Authentication Header Information Leakage	4.5	7.10.6

Further details

CVE data for 5.2.1 provided as JSON.

Changelog for curl 5.2.1

See vulnerability summary for the previous release: 5.2 or the subsequent release: 5.3