cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0015
