NVD

Id
36604  
Name
CVE-2013-0249  
Description
Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-03-08  
Modified Date
2016-12-07  
Seq
2013-0249  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187033 36604 CVE-2013-0249 http://blog.volema.com/curl-rce.html  View
187034 36604 CVE-2013-0249 http://curl.haxx.se/docs/adv_20130206.html  View
187035 36604 CVE-2013-0249 APPLE-SA-2013-10-22-3  View
187036 36604 CVE-2013-0249 FEDORA-2013-2098  View
187037 36604 CVE-2013-0249 http://nakedsecurity.sophos.com/2013/02/10/anatomy-of-a-vulnerability-curl-web-download-toolkit-holed-by-authentication-bug/  View
187038 36604 CVE-2013-0249 http://packetstormsecurity.com/files/120147/cURL-Buffer-Overflow.html  View
187039 36604 CVE-2013-0249 http://packetstormsecurity.com/files/120170/Slackware-Security-Advisory-curl-Updates.html  View
187040 36604 CVE-2013-0249 24487  View
187041 36604 CVE-2013-0249 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
187042 36604 CVE-2013-0249 57842  View
187043 36604 CVE-2013-0249 1028093  View
187044 36604 CVE-2013-0249 USN-1721-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20286 JVNDB-2013-001861 curl および libcurl におけるスタックベースのバッファオーバーフローの脆弱性 curl および libcurl の lib/curl_sasl.c 内の Curl_sasl_create_digest_md5_message 関数には、SASL DIGEST-MD5 認証のネゴシエーションの際、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-0249 60191 CVE-2013-0249 36604 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001861.html 2013-02-06 2015-07-29 View