CURL-CVE-2005-0490
- Source
- https://curl.se/docs/CVE-2005-0490.html
- Import Source
- https://curl.se/docs/CURL-CVE-2005-0490.json
- JSON Data
- https://api.osv.dev/v1/vulns/CURL-CVE-2005-0490
- Aliases
- Published
- 2005-02-21T08:00:00Z
- Modified
- 2026-04-25T16:17:55.546581Z
- Summary
- Authentication Buffer Overflows
- Details
-
Due to bad usage of the base64 decode function to a stack-based buffer without checking the data length, it was possible for a malicious HTTP server to overflow the client during NTLM negotiation and for an FTP server to overflow the client during krb4 negotiation. The announcement of this flaw was done without contacting us.
- Database specific
{ "www": "https://curl.se/docs/CVE-2005-0490.html", "package": "curl", "severity": "High", "CWE": { "id": "CWE-121", "desc": "Stack-based Buffer Overflow" }, "URL": "https://curl.se/docs/CVE-2005-0490.json", "last_affected": "7.13.0", "affects": "both" }- References
-
- Credits
-
-
- unknown - FINDER
-