NVD

Id
68847  
Name
CVE-2005-3185  
Description
Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-10-13  
Modified Date
2017-07-10  
Seq
2005-3185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
355627 68847 CVE-2005-3185 SCOSA-2006.10  View
355628 68847 CVE-2005-3185 APPLE-SA-2005-11-29  View
355629 68847 CVE-2005-3185 TSLSA-2005-0059  View
355630 68847 CVE-2005-3185 oval:org.mitre.oval:def:9810  View
355631 68847 CVE-2005-3185 82  View
355632 68847 CVE-2005-3185 1015056  View
355633 68847 CVE-2005-3185 1015057  View
355634 68847 CVE-2005-3185 SSA:2005-310-01  View
355635 68847 CVE-2005-3185 DSA-919  View
355636 68847 CVE-2005-3185 GLSA-200510-19  View
355637 68847 CVE-2005-3185 20051013 Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability  View
355638 68847 CVE-2005-3185 MDKSA-2005:182  View
355639 68847 CVE-2005-3185 SUSE-SA:2005:063  View
355640 68847 CVE-2005-3185 FEDORA-2005-1129  View
355641 68847 CVE-2005-3185 FEDORA-2005-1000  View
355642 68847 CVE-2005-3185 RHSA-2005:807  View
355643 68847 CVE-2005-3185 RHSA-2005:812  View
355644 68847 CVE-2005-3185 15102  View
355645 68847 CVE-2005-3185 15647  View
355646 68847 CVE-2005-3185 USN-205-1  View
355647 68847 CVE-2005-3185 ADV-2005-2088  View
355648 68847 CVE-2005-3185 ADV-2005-2125  View
355649 68847 CVE-2005-3185 ADV-2005-2659  View
355650 68847 CVE-2005-3185 wget-curl-ntlm-username-bo(22721)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62408 JVNDB-2005-000610 curl および wget の ntlm_output() 関数におけるバッファオーバーフローの脆弱性 curl および wget でサポートしている NTLM 認証機能を実装する http-ntlm.c の ntlm_output() 関数には、異常に長いユーザ名およびドメイン名を処理する際にバッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-3185 14389 CVE-2005-3185 68847 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000610.html 2005-10-13 2007-04-01 View