UpHeron
All vulnerabilities

Servers and applications

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in…

Severity
High 8.8
Published
2 May 2005
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Exploit chance
5.7% in the next 30 daysHigher than 93% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-131
Attack
Over the network · Needs a user account · No user action needed
Attacker can
Read data · Change data · Take it down
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Sources
NVD

Description

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.

From NVD.

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • Version 7.12.1
curlServers and applications · cpe:a:haxx:libcurl
  • Version 7.12.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2005-0490
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2005-0490