NVD

Id
66247  
Name
CVE-2005-0490  
Description
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0490  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344957 66247 CVE-2005-0490 CLA-2005:940  View
344958 66247 CVE-2005-0490 20050228 [USN-86-1] cURL vulnerability  View
344959 66247 CVE-2005-0490 oval:org.mitre.oval:def:10273  View
344960 66247 CVE-2005-0490 GLSA-200503-20  View
344961 66247 CVE-2005-0490 20050221 Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability  View
344962 66247 CVE-2005-0490 20050221 Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability  View
344963 66247 CVE-2005-0490 MDKSA-2005:048  View
344964 66247 CVE-2005-0490 SUSE-SA:2005:011  View
344965 66247 CVE-2005-0490 RHSA-2005:340  View
344966 66247 CVE-2005-0490 12615  View
344967 66247 CVE-2005-0490 12616  View
344968 66247 CVE-2005-0490 curl-kerberos-bo(19423)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61932 JVNDB-2005-000134 cURL/libcURL の Kerberos 認証および NTLM 認証におけるバッファオーバーフローの脆弱性 cURL/libcURL 7.13.0 以前には、Kerberos 認証および NTLM 認証を行うサイトからの Base64 でエンコードされた HTTP 応答をデコードする際に、 (1) Kerberos 認証時に使用される lib/krb4.c の Curl_krb_kauth() 関数、krb4_auth() 関数 (2) NTLM 認証時に使用される lib/http_ntlm.c の Curl_input_ntlm() 関数の箇所においてデータ長を適切にチェックしないため、バッファオーバーフローが発生する問題が存在します。 CVE-2005-0490 11694 CVE-2005-0490 66247 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000134.html 2005-02-21 2007-04-01 View