CVE-2014-0015-7-27.patch

--- ./lib/url.c.orig	2014-01-14 16:21:29.832088000 +0200
+++ ./lib/url.c	2014-01-14 16:32:43.074018000 +0200
@@ -3103,8 +3103,8 @@ ConnectionExists(struct SessionHandle *d
         }
         if((needle->handler->protocol & CURLPROTO_FTP) ||
            ((needle->handler->protocol & CURLPROTO_HTTP) &&
-            ((data->state.authhost.want==CURLAUTH_NTLM) ||
-             (data->state.authhost.want==CURLAUTH_NTLM_WB)))) {
+            ((data->state.authhost.want & CURLAUTH_NTLM) ||
+             (data->state.authhost.want & CURLAUTH_NTLM_WB)))) {
           /* This is FTP or HTTP+NTLM, verify that we're using the same name
              and password as well */
           if(!strequal(needle->user, check->user) ||