Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-3185
HistoryOct 13, 2005 - 10:02 p.m.

CVE-2005-3185

2005-10-1322:02:00
CWE-119
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.

Affected configurations

NVD
Node
curlcurlMatch7.13.2
OR
libcurllibcurlMatch7.13.2
OR
wgetwgetMatch1.10

References

Related

nessus 15
gentoo 1
openvas 11
centos 4
ubuntucve 1
cvelist 1
slackware 1
cve 1
redhat 2
ubuntu 1
securityvulns 2
debiancve 1
debian 2
osv 1
nessus
nessus
Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : curl/wget (SSA:2005-310-01)
2005-11-07 00:00:00
CentOS 3 / 4 : wget (CESA-2005:812)
2006-07-03 00:00:00
Ubuntu 4.10 / 5.04 / 5.10 : curl, wget vulnerabilities (USN-205-1)
2006-01-15 00:00:00
gentoo
gentoo
cURL: NTLM username stack overflow
2005-10-22 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200510-19 (cURL)
2008-09-24 00:00:00
Slackware Advisory SSA:2005-310-01 curl/wget
2012-09-11 00:00:00
SLES9: Security update for curl
2009-10-10 00:00:00
centos
centos
wget security update
2005-11-02 17:08:39
openssl096b, wget security update
2005-11-02 17:10:22
wget security update
2005-11-03 05:22:50
ubuntucve
ubuntucve
CVE-2005-3185
2005-10-13 00:00:00
cvelist
cvelist
CVE-2005-3185
2005-10-13 04:00:00
slackware
slackware
curl/wget
2005-11-06 13:02:36
cve
cve
CVE-2005-3185
2005-10-13 22:02:00
redhat
redhat
(RHSA-2005:807) curl security update
2005-11-02 00:00:00
(RHSA-2005:812) wget security update
2005-11-02 00:00:00
ubuntu
ubuntu
Curl and wget vulnerabilities
2005-10-14 00:00:00
securityvulns
securityvulns
[Full-disclosure] iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability
2005-10-13 00:00:00
Multiple Network-related Vulnerabilities in Electric Sheep
2005-12-26 00:00:00
debiancve
debiancve
CVE-2005-3185
2005-10-13 22:02:00
debian
debian
[SECURITY] [DSA 919-1] New curl packages fix potential security problem
2005-12-12 13:03:48
[SECURITY] [DSA 919-1] New curl packages fix potential security problem
2005-12-12 13:03:48
osv
osv
curl - buffer overflow
2005-12-12 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON
Related for NVD:CVE-2005-3185
nessus15gentoo1openvas11centos4ubuntucve1cvelist1slackware1cve1redhat2ubuntu1securityvulns2debiancve1debian2osv1