Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0490
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0490

2005-05-0204:00:00
CWE-131
[email protected]
web.nvd.nist.gov
23
cve-2005-0490
buffer overflow
libcurl
curl
remote code execution
base64
ntlm
kerberos
authentication
security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.1%

JSON

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.

Related

nessus 8
ubuntucve 1
gentoo 1
freebsd 1
openvas 7
centos 2
debiancve 1
ubuntu 1
redhat 1
f5 2
suse 1
cve 1
nessus
nessus
Ubuntu 4.10 : curl vulnerability (USN-86-1)
2006-01-15 00:00:00
FreeBSD : curl -- authentication buffer overflow vulnerability (96df5fd0-8900-11d9-aa18-0001020eed82)
2005-07-13 00:00:00
RHEL 2.1 / 3 / 4 : curl (RHSA-2005:340)
2005-04-06 00:00:00
ubuntucve
ubuntucve
CVE-2005-0490
2005-05-02 00:00:00
gentoo
gentoo
curl: NTLM response buffer overflow
2005-03-16 00:00:00
freebsd
freebsd
curl -- authentication buffer overflow vulnerability
2004-12-21 00:00:00
openvas
openvas
FreeBSD Ports: curl
2008-09-04 00:00:00
FreeBSD Ports: curl
2008-09-04 00:00:00
SLES9: Security update for curl
2009-10-10 00:00:00
centos
centos
curl security update
2005-04-06 04:59:36
curl security update
2005-04-05 21:59:11
debiancve
debiancve
CVE-2005-0490
2005-05-02 04:00:00
ubuntu
ubuntu
cURL vulnerability
2005-02-28 00:00:00
redhat
redhat
(RHSA-2005:340) curl security update
2005-04-05 00:00:00
f5
f5
K4447 : cURL buffer overflow vulnerability CAN-2005-0490
2013-03-28 00:00:00
SOL4447 - cURL buffer overflow vulnerability - CAN-2005-0490
2007-05-16 00:00:00
suse
suse
remote code execution in curl
2005-02-28 14:07:02
cve
cve
CVE-2005-0940
2005-05-02 04:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.1%

JSON
Related for CVE-2005-0490
nessus8ubuntucve1gentoo1freebsd1openvas7centos2debiancve1ubuntu1redhat1f52suse1cve1