CVE Feed

    Dashboard / CVE / CVE-2005-3185

    CVE-2005-3185

    Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.

    Published:Oct 12, 2005
    Last Modified:Apr 16, 2026
    EPS:Oct 13, 2005
    EPSS Score:0.04852
    CVSS Score:7.5

    Affected Products

    Vendor
    Curl
    Product
    Curl
    Vendor
    Libcurl
    Product
    Libcurl
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Wget
    Product
    Wget

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-82209 (CVSS 8.2) — When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing…
    CVE-2026-82208 (CVSS 7.5) — With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the t…
    CVE-2026-80255 (CVSS 7.5) — A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately b…
    CVE-2026-80231 (CVSS 7.5) — A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when usi…
    CVE-2026-80230 (CVSS 7.5) — When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLO…
    CVE-2026-80229 (CVSS 7.5) — When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating …
    CVE-2026-19931 (CVSS 9.8) — A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authent…
    CVE-2026-18924 (CVSS 9.1) — A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections…
    CVE-2026-13608 (CVSS 7.4) — A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be m…
    CVE-2026-9547 (CVSS 7.4) — When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KE…

    References

    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt
    http://docs.info.apple.com/article.html?artnum=302847
    http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
    http://secunia.com/advisories/17192
    http://secunia.com/advisories/17193
    http://secunia.com/advisories/17203
    http://secunia.com/advisories/17208
    http://secunia.com/advisories/17228
    http://secunia.com/advisories/17247
    http://secunia.com/advisories/17297
    http://secunia.com/advisories/17320
    http://secunia.com/advisories/17400
    http://secunia.com/advisories/17403
    http://secunia.com/advisories/17485
    http://secunia.com/advisories/17813
    http://secunia.com/advisories/17965
    http://secunia.com/advisories/19193
    http://securityreason.com/securityalert/82
    http://securitytracker.com/id?1015056
    http://securitytracker.com/id?1015057
    http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010
    http://www.debian.org/security/2005/dsa-919
    http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml
    http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities
    http://www.mandriva.com/security/advisories?name=MDKSA-2005:182
    http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html
    http://www.osvdb.org/20011
    http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html
    http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html
    http://www.redhat.com/support/errata/RHSA-2005-807.html
    http://www.redhat.com/support/errata/RHSA-2005-812.html
    http://www.securityfocus.com/bid/15102
    http://www.securityfocus.com/bid/15647
    http://www.vupen.com/english/advisories/2005/2088
    http://www.vupen.com/english/advisories/2005/2125
    http://www.vupen.com/english/advisories/2005/2659
    https://exchange.xforce.ibmcloud.com/vulnerabilities/22721
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810
    https://usn.ubuntu.com/205-1/
    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt
    http://docs.info.apple.com/article.html?artnum=302847
    http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
    http://secunia.com/advisories/17192
    http://secunia.com/advisories/17193
    http://secunia.com/advisories/17203
    http://secunia.com/advisories/17208
    http://secunia.com/advisories/17228
    http://secunia.com/advisories/17247
    http://secunia.com/advisories/17297
    http://secunia.com/advisories/17320
    http://secunia.com/advisories/17400
    http://secunia.com/advisories/17403
    http://secunia.com/advisories/17485
    http://secunia.com/advisories/17813
    http://secunia.com/advisories/17965
    http://secunia.com/advisories/19193
    http://securityreason.com/securityalert/82
    http://securitytracker.com/id?1015056
    http://securitytracker.com/id?1015057
    http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010
    http://www.debian.org/security/2005/dsa-919
    http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml
    http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities
    http://www.mandriva.com/security/advisories?name=MDKSA-2005:182
    http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html
    http://www.osvdb.org/20011
    http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html
    http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html
    http://www.redhat.com/support/errata/RHSA-2005-807.html
    http://www.redhat.com/support/errata/RHSA-2005-812.html
    http://www.securityfocus.com/bid/15102
    http://www.securityfocus.com/bid/15647
    http://www.vupen.com/english/advisories/2005/2088
    http://www.vupen.com/english/advisories/2005/2125
    http://www.vupen.com/english/advisories/2005/2659
    https://exchange.xforce.ibmcloud.com/vulnerabilities/22721
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810
    https://usn.ubuntu.com/205-1/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High