Detections
Analytics
Curl < 7.13.1 NTLM Stack-based Buffer Overflow
high Log Correlation Engine Plugin ID 801387
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote host is using a version of curl (or libcurl) that is vulnerable to several remote buffer overflows. To exploit this vulnerability, an attacker would have to set up a rogue web server that would reply with a malicious NTLM or Kerberos authentication request. Upon successful exploitation, the attacker would be able to execute arbitrary commands with the rights of the web server.Solution
Upgrade to version 7.13.1 or higher.Plugin Details
Severity: High
ID: 801387
Family: Web Clients
Risk Information
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
Reference Information
CVE: CVE-2005-0490