CVE-2005-3185

Published: Oct 13, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.

Affected (3)

Products: Curl: Curl · Libcurl: Libcurl · Wget: Wget

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Curl Curl	Version 7.13.2
Libcurl Libcurl	Version 7.13.2
Wget Wget	Version 1.10

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (78)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt (unsafe URL)

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=302847

Source: cve@mitre.org

http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html

Source: cve@mitre.org

http://secunia.com/advisories/17192

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17193

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17203

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17208

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17228

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17247

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17297

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17320

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17400

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17403

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17485

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17813

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17965

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19193

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/82

Source: cve@mitre.org

http://securitytracker.com/id?1015056

Source: cve@mitre.org

http://securitytracker.com/id?1015057

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-919

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:182

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html

Source: cve@mitre.org

http://www.osvdb.org/20011

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-807.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-812.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15102

Source: cve@mitre.org

http://www.securityfocus.com/bid/15647

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2088

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2005/2125

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2005/2659

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/22721

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810

Source: cve@mitre.org

https://usn.ubuntu.com/205-1/

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt (unsafe URL)