Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2005:340
HistoryApr 05, 2005 - 9:59 p.m.

curl security update

2005-04-0521:59:11
CentOS Project
lists.centos.org
38

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.3%

JSON

CentOS Errata and Security Advisory CESA-2005:340

cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
Dict servers, using any of the supported protocols. cURL is designed
to work without user interaction or any kind of interactivity.

Multiple buffer overflow bugs were found in the way curl processes base64
encoded replies. If a victim can be tricked into visiting a URL with curl,
a malicious web server could execute arbitrary code on a victim’s machine.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0490 to this issue.

All users of curl are advised to upgrade to these updated
packages, which contain backported fixes for these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-April/073693.html
https://lists.centos.org/pipermail/centos-announce/2005-April/073694.html
https://lists.centos.org/pipermail/centos-announce/2005-April/073700.html
https://lists.centos.org/pipermail/centos-announce/2005-April/073704.html
https://lists.centos.org/pipermail/centos-announce/2005-April/073705.html
https://lists.centos.org/pipermail/centos-announce/2005-April/073707.html

Affected packages:
curl
curl-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:340

Related

openvas 7
redhat 1
nessus 8
suse 1
f5 2
cve 2
centos 1
ubuntucve 1
freebsd 1
gentoo 1
ubuntu 1
debiancve 1
openvas
openvas
FreeBSD Ports: curl
2008-09-04 00:00:00
SLES9: Security update for curl
2009-10-10 00:00:00
FreeBSD Ports: curl
2008-09-04 00:00:00
redhat
redhat
(RHSA-2005:340) curl security update
2005-04-05 00:00:00
nessus
nessus
CentOS 3 / 4 : curl (CESA-2005:340)
2006-07-03 00:00:00
Mandrake Linux Security Advisory : curl (MDKSA-2005:048)
2005-03-06 00:00:00
RHEL 2.1 / 3 / 4 : curl (RHSA-2005:340)
2005-04-06 00:00:00
suse
suse
remote code execution in curl
2005-02-28 14:07:02
f5
f5
K4447 : cURL buffer overflow vulnerability CAN-2005-0490
2013-03-28 00:00:00
SOL4447 - cURL buffer overflow vulnerability - CAN-2005-0490
2007-05-16 00:00:00
cve
cve
CVE-2005-0490
2005-05-02 04:00:00
CVE-2005-0940
2005-05-02 04:00:00
centos
centos
curl security update
2005-04-06 04:59:36
ubuntucve
ubuntucve
CVE-2005-0490
2005-05-02 00:00:00
freebsd
freebsd
curl -- authentication buffer overflow vulnerability
2004-12-21 00:00:00
gentoo
gentoo
curl: NTLM response buffer overflow
2005-03-16 00:00:00
ubuntu
ubuntu
cURL vulnerability
2005-02-28 00:00:00
debiancve
debiancve
CVE-2005-0490
2005-05-02 04:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.3%

JSON
Related for CESA-2005:340
openvas7redhat1nessus8suse1f52cve2centos1ubuntucve1freebsd1gentoo1ubuntu1debiancve1