i received this bug report against curl 7.7.3 on debian system

cheers :)

----- Forwarded message from root <root_at_dub-t3-1.nwcgroup.com> -----

Date: Wed, 16 May 2001 18:52:00 +0100
From: root <root_at_dub-t3-1.nwcgroup.com>
To: Debian Bug Tracking System <submit_at_bugs.debian.org>
Reply-To: root <root_at_dub-t3-1.nwcgroup.com>, 97709_at_bugs.debian.org
Subject: Bug#97709: Basic authentication fails for IIS servers

Package: curl
Version: 7.7.3-1
Severity: important

As far as I can ascertain, today's curl update no longer manages to
negotiate Basic authentication successfully with Microsoft NT IIS
servers. There is no problem when accessing NT servers which do not
require authentication, or Apache on Linux with or without
authentication, but the combination of "Site running NT" and "Site
requiring authentication" fails - curl simply closes the connection
before downloading any data. Curl 7.7.1 works correctly.

Sample session (with usernames etc. removed):

% curl -s -w '%{size_download} bytes\n' -v -L -u XXXX:XXXX http://HOSTNAME/URI/ -o /dev/null
* Connected to HOSTNAME (IP.ADDRESS)
> GET /URI/ HTTP/1.1
Authorization: Basic ENCODED_AUTH_STRING
User-Agent: curl/7.7.3 (i586-pc-linux-gnu) libcurl 7.7.3 (OpenSSL 0.9.6a)
Host: HOSTNAME
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

* Connection (#0) left alive
0 bytes
* Closing live connection (#0)

... while curl 7.7.1 does:

% curl -s -w '%{size_download} bytes\n' -v -L -u XXXX:XXXX http://HOSTNAME/URI/ -o /dev/null
* Connected to HOSTNAME (IP.ADDRESS)
> GET /URI/ HTTP/1.1
Authorization: Basic ENCODED_AUTH_STRING
User-Agent: curl/7.7.1 (i586-pc-linux-gnu) libcurl 7.7.1 (SSL 0.9.6)
Host: HOSTNAME
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*

* Connection (#0) left alive
140.000 bytes
* Closing live connection (#0)

-- System Information
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux relay 2.4.3 #1 Fri Apr 20 18:12:05 IST 2001 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages curl depends on:
ii libc6 2.2.3-1 GNU C Library: Shared libraries an
ii libcurl2-ssl 7.7.3-1 Multi-protocol file transfer libra

----- End forwarded message -----

-----[ Domenico Andreoli, aka cavok
 --[ http://filibusta.crema.unimi.it/~cavok/gpgkey.asc
   ---[ 3A0F 2F80 F79C 678A 8936 4FEE 0677 9033 A20E BC50
Received on 2001-05-17