Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-86-1
HistoryFeb 28, 2005 - 12:00 a.m.

cURL vulnerability

2005-02-2800:00:00
ubuntu.com
28

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.3%

JSON

Releases

  • Ubuntu 4.10

Details

infamous41md discovered a buffer overflow in cURL’s NT LAN Manager
(NTLM) authentication handling. By sending a specially crafted long
NTLM reply packet, a remote attacker could overflow the reply buffer.
This could lead to execution of arbitrary attacker specified code with
the privileges of the application using the cURL library.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchlibcurl2-gssapi< *UNKNOWN
Ubuntu4.10noarchlibcurl2< *UNKNOWN

Related

nessus 8
ubuntucve 1
gentoo 1
freebsd 1
centos 2
debiancve 1
cve 2
openvas 7
redhat 1
suse 1
f5 2
nessus
nessus
FreeBSD : curl -- authentication buffer overflow vulnerability (96df5fd0-8900-11d9-aa18-0001020eed82)
2005-07-13 00:00:00
Ubuntu 4.10 : curl vulnerability (USN-86-1)
2006-01-15 00:00:00
Mandrake Linux Security Advisory : curl (MDKSA-2005:048)
2005-03-06 00:00:00
ubuntucve
ubuntucve
CVE-2005-0490
2005-05-02 00:00:00
gentoo
gentoo
curl: NTLM response buffer overflow
2005-03-16 00:00:00
freebsd
freebsd
curl -- authentication buffer overflow vulnerability
2004-12-21 00:00:00
centos
centos
curl security update
2005-04-05 21:59:11
curl security update
2005-04-06 04:59:36
debiancve
debiancve
CVE-2005-0490
2005-05-02 04:00:00
cve
cve
CVE-2005-0490
2005-05-02 04:00:00
CVE-2005-0940
2005-05-02 04:00:00
openvas
openvas
FreeBSD Ports: curl
2008-09-04 00:00:00
FreeBSD Ports: curl
2008-09-04 00:00:00
SLES9: Security update for curl
2009-10-10 00:00:00
redhat
redhat
(RHSA-2005:340) curl security update
2005-04-05 00:00:00
suse
suse
remote code execution in curl
2005-02-28 14:07:02
f5
f5
K4447 : cURL buffer overflow vulnerability CAN-2005-0490
2013-03-28 00:00:00
SOL4447 - cURL buffer overflow vulnerability - CAN-2005-0490
2007-05-16 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.3%

JSON
Related for USN-86-1
nessus8ubuntucve1gentoo1freebsd1centos2debiancve1cve2openvas7redhat1suse1f52