Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0490
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0490

2005-05-0204:00:00
CWE-131
[email protected]
web.nvd.nist.gov
24
cve-2005-0490
buffer overflow
libcurl
curl
remote code execution
base64
ntlm
kerberos
authentication
security vulnerability

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.

Affected configurations

NVD
Node
haxxcurlMatch7.12.1
OR
haxxlibcurlMatch7.12.1

Related

freebsd 1
nessus 8
gentoo 1
ubuntucve 1
suse 1
openvas 7
redhat 1
f5 2
cvelist 1
ubuntu 1
nvd 2
debiancve 1
centos 2
cve 1
freebsd
freebsd
curl -- authentication buffer overflow vulnerability
2004-12-21 00:00:00
nessus
nessus
Ubuntu 4.10 : curl vulnerability (USN-86-1)
2006-01-15 00:00:00
FreeBSD : curl -- authentication buffer overflow vulnerability (96df5fd0-8900-11d9-aa18-0001020eed82)
2005-07-13 00:00:00
CentOS 3 / 4 : curl (CESA-2005:340)
2006-07-03 00:00:00
gentoo
gentoo
curl: NTLM response buffer overflow
2005-03-16 00:00:00
ubuntucve
ubuntucve
CVE-2005-0490
2005-05-02 00:00:00
suse
suse
remote code execution in curl
2005-02-28 14:07:02
openvas
openvas
FreeBSD Ports: curl
2008-09-04 00:00:00
SLES9: Security update for curl
2009-10-10 00:00:00
FreeBSD Ports: curl
2008-09-04 00:00:00
redhat
redhat
(RHSA-2005:340) curl security update
2005-04-05 00:00:00
f5
f5
K4447 : cURL buffer overflow vulnerability CAN-2005-0490
2013-03-28 00:00:00
SOL4447 - cURL buffer overflow vulnerability - CAN-2005-0490
2007-05-16 00:00:00
cvelist
cvelist
CVE-2005-0490
2005-02-21 05:00:00
ubuntu
ubuntu
cURL vulnerability
2005-02-28 00:00:00
nvd
nvd
CVE-2005-0490
2005-05-02 04:00:00
CVE-2005-0940
2005-05-02 04:00:00
debiancve
debiancve
CVE-2005-0490
2005-05-02 04:00:00
centos
centos
curl security update
2005-04-05 21:59:11
curl security update
2005-04-06 04:59:36
cve
cve
CVE-2005-0940
2005-05-02 04:00:00

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON
Related for CVE-2005-0490
freebsd1nessus8gentoo1ubuntucve1suse1openvas7redhat1f52cvelist1ubuntu1nvd2debiancve1centos2cve1