CVE-2012-4545
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12...
CVE-2012-4545 is a medium vulnerability (CVSS 5.1) in Elinks, published December 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.91%, the 79th percentile. Fixed in elinks 0.12~pre5-9.
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
Exploit likelihood
What each source reports
NVD Score used
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
- Record
CVE-2012-4545- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
- Record
CVE-2012-4545- Updated
- 2026-11-02
EUVDEUVD-2012-4473 No score
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
- Record
EUVD-2012-4473- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rqcr-v8rp-mcvc No score
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12...
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
- Record
GHSA-rqcr-v8rp-mcvc- Weakness
- CWE-287
- Updated
- 2026-11-02
OSV No score
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
- Record
CVE-2012-4545- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4545 No score
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
- Record
DEBIAN-CVE-2012-4545- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
elinksDebian:12 |
before 0.12~pre5-9 | 0.12~pre5-9 |
elinksDebian:13 |
before 0.12~pre5-9 | 0.12~pre5-9 |
elinksDebian:14 |
before 0.12~pre5-9 | 0.12~pre5-9 |
elinksDebian:6.0 |
before 0.12~pre5-2+squeeze1, plus listed versions 0.12~pre5-20.12~pre5-2+armhf0.12~pre5-2+sparc64 |
0.12~pre5-2+squeeze1 |
elinksRed Hat:enterprise_linux:5::server |
before 0:0.11.1-8.el5_9 | 0:0.11.1-8.el5_9 |
elinks-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.11.1-8.el5_9 | 0:0.11.1-8.el5_9 |
elinksRed Hat:enterprise_linux:6::client |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
elinks-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
elinksRed Hat:enterprise_linux:6::computenode |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
elinks-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
elinksRed Hat:enterprise_linux:6::server |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
elinks-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
elinksRed Hat:enterprise_linux:6::workstation |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
elinks-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.12-0.21.pre5.el6_3 | 0:0.12-0.21.pre5.el6_3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
mandriva.com/security/advisories?name=MDVSA-2013:075
securityfocus.com/bid/57065
debian.org/security/2012/dsa-2592
exchange.xforce.ibmcloud.com/vulnerabilities/80882
repo.or.cz/w/elinks.git/blobdiff/89056e21fc7ab8e1c2d4e06ec9d0c6d01e70669a..da18694ff7dd0b67dfcb3c417fb0579b1e7d02d7:/src/protocol/http/http_negotiate.c
rhn.redhat.com/errata/RHSA-2013-0250.html
Show 11 moreShow less
bugzilla.elinks.cz/show_bug.cgi?id=1124
secunia.com/advisories/51569
nvd.nist.gov/vuln/detail/CVE-2012-4545
github.com/advisories/GHSA-rqcr-v8rp-mcvc
security-tracker.debian.org/tracker/CVE-2012-4545
access.redhat.com/errata/RHSA-2013:0250
bugzilla.redhat.com/show_bug.cgi?id=864566
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0250.json
cve.org/CVERecord?id=CVE-2012-4545