CVE-2005-0490
- State
- Published
- Severity
- Not scored
- Published
- Feb 21, 2005
- Updated
- Aug 7, 2024
- Reserved
- Feb 21, 2005
Description
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20050228 [USN-86-1] cURL vulnerabilitymailing-list
- CLA-2005:940vendor-advisory
- 20050221 Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerabilitythird-party-advisory
- oval:org.mitre.oval:def:10273vdb-entrysignature
- 12616vdb-entry
- 12615vdb-entry
- curl-kerberos-bo(19423)vdb-entry
- 20050221 Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerabilitythird-party-advisory
- MDKSA-2005:048vendor-advisory
- GLSA-200503-20vendor-advisory
- RHSA-2005:340vendor-advisory
- SUSE-SA:2005:011vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.