7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
A buffer overflow has been found in the NTLM authentication handler of
the Curl library and wget. By tricking an user or automatic system
that uses the Curl library, the curl application, or wget into
visiting a specially-crafted web site, a remote attacker could exploit
this to execute arbitrary code with the privileges of the calling
user.
The Ubuntu 4.10 and 5.04 versions of wget are not affected by this.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 5.10 | noarch | wget | < * | UNKNOWN |
Ubuntu | 5.10 | noarch | libcurl3 | < * | UNKNOWN |
Ubuntu | 5.10 | noarch | libcurl2 | < * | UNKNOWN |
Ubuntu | 5.04 | noarch | wget | < * | UNKNOWN |
Ubuntu | 5.04 | noarch | libcurl3 | < * | UNKNOWN |
Ubuntu | 5.04 | noarch | libcurl2 | < * | UNKNOWN |
Ubuntu | 4.10 | noarch | wget | < * | UNKNOWN |
Ubuntu | 4.10 | noarch | libcurl3 | < * | UNKNOWN |
Ubuntu | 4.10 | noarch | libcurl2 | < * | UNKNOWN |