CVE-2012-0036

Published: Apr 13, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.

Affected (26)

Products: Curl: Curl, Libcurl

2 products

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Curl Curl	Version 7.20.0
Curl Curl	Version 7.20.1
Curl Curl	Version 7.21.0
Curl Curl	Version 7.21.1
Curl Curl	Version 7.21.2
Curl Curl	Version 7.21.3
Curl Curl	Version 7.21.4
Curl Curl	Version 7.21.5
Curl Curl	Version 7.21.6
Curl Curl	Version 7.21.7
Curl Curl	Version 7.22.0
Curl Curl	Version 7.23.0
Curl Curl	Version 7.23.1

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Curl Libcurl	Version 7.20.0
Curl Libcurl	Version 7.20.1
Curl Libcurl	Version 7.21.0
Curl Libcurl	Version 7.21.1
Curl Libcurl	Version 7.21.2
Curl Libcurl	Version 7.21.3
Curl Libcurl	Version 7.21.4
Curl Libcurl	Version 7.21.5
Curl Libcurl	Version 7.21.6
Curl Libcurl	Version 7.21.7
Curl Libcurl	Version 7.22.0
Curl Libcurl	Version 7.23.0
Curl Libcurl	Version 7.23.1

Related CWEs

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (30)

http://curl.haxx.se/curl-url-sanitize.patch

Source: secalert@redhat.com

Patch

http://curl.haxx.se/docs/adv_20120124.html

Source: secalert@redhat.com

Vendor Advisory

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

Source: secalert@redhat.com

http://secunia.com/advisories/48256

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201203-02.xml

Source: secalert@redhat.com

http://support.apple.com/kb/HT5281

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2398

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2012:058

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/51665

Source: secalert@redhat.com

http://www.securitytracker.com/id/1032924

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=773457

Source: secalert@redhat.com

https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238

Source: secalert@redhat.com

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03760en_us

Source: secalert@redhat.com

http://curl.haxx.se/curl-url-sanitize.patch

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://curl.haxx.se/docs/adv_20120124.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48256

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201203-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT5281

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2398

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2012:058

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/51665

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1032924

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=773457

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03760en_us

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.