Vulnerability Description
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Haxx | Curl | 7.12.1 |
| Haxx | Libcurl | 7.12.1 |
Related Weaknesses (CWE)
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940Broken LinkPatchVendor Advisory
- http://marc.info/?l=full-disclosure&m=110959085507755&w=2Mailing ListPatch
- http://www.gentoo.org/security/en/glsa/glsa-200503-20.xmlThird Party Advisory
- http://www.idefense.com/application/poi/display?id=202&type=vulnerabilitiesBroken LinkVendor Advisory
- http://www.idefense.com/application/poi/display?id=203&type=vulnerabilitiesBroken LinkVendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:048Third Party Advisory
- http://www.novell.com/linux/security/advisories/2005_11_curl.htmlBroken Link
- http://www.redhat.com/support/errata/RHSA-2005-340.htmlBroken Link
- http://www.securityfocus.com/bid/12615Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/12616Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19423Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Broken Link
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000940Broken LinkPatchVendor Advisory
- http://marc.info/?l=full-disclosure&m=110959085507755&w=2Mailing ListPatch
- http://www.gentoo.org/security/en/glsa/glsa-200503-20.xmlThird Party Advisory
FAQ
What is CVE-2005-0490?
CVE-2005-0490 is a vulnerability with a CVSS score of 8.8 (HIGH). Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the i...
How severe is CVE-2005-0490?
CVE-2005-0490 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-0490?
Check the references section above for vendor advisories and patch information. Affected products include: Haxx Curl, Haxx Libcurl.