CURL-CVE-2005-3185
Dashboard / Vulnerabilities / CURL-CVE-2005-3185
Summary: NTLM Buffer Overflow
Details: libcurl's NTLM function can overflow a stack-based buffer if given a too long username or domain name. This would happen if you enable NTLM authentication and either: A - pass in a username and domain name to libcurl that together are longer than 192 bytes B - allow (lib)curl to follow HTTP "redirects" (Location: and the appropriate HTTP 30x response code) and the new URL contains a URL with a username and domain name that together are longer than 192 bytes
References:
Affected packages
Package
Name:
Purl:
Affected ranges
Type: SEMVER
Events:
Introduced- 7.10.6
Fixed -7.15.0
Affected versions
7.14.1
7.14.0
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
