Curl < 7.13.1 NTLM Stack-based Buffer Overflow

High Nessus Network Monitor Plugin ID 2640

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is using a version of curl (or libcurl) that is vulnerable to several remote buffer overflows. To exploit this vulnerability, an attacker would have to set up a rogue web server that would reply with a malicious NTLM or Kerberos authentication request. Upon successful exploitation, the attacker would be able to execute arbitrary commands with the rights of the web server.

Solution

Upgrade to version 7.13.1 or higher.

Plugin Details

Severity: High

ID: 2640

File Name: 2640.prm

Family: Web Clients

Published: 2005/02/22

Modified: 2016/12/06

Dependencies: 1735, 8314

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.6

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 8.1

Temporal Score: 7

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:haxx:curl

Reference Information

CVE: CVE-2005-0490

BID: 12615, 12616