cURL / libcURL Kerberos Authentication Buffer Overflow Vulnerability

Bugtraq ID: 12616
Class: Boundary Condition Error
CVE: CVE-2005-0490
Remote: Yes
Local: No
Published: Feb 22 2005 12:00AM
Updated: Aug 24 2006 05:54PM
Credit: Credited to infamous41md[at]hotpop.com.
Vulnerable: SGI ProPack 3.0
Mandriva Linux Mandrake 10.1 x86_64
Mandriva Linux Mandrake 10.1
Mandriva Linux Mandrake 10.0 AMD64
Mandriva Linux Mandrake 10.0
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
Gentoo Linux
F5 BigIP 4.6.2
F5 BigIP 4.6
F5 BigIP 4.5.12
F5 BigIP 4.5.11
F5 BigIP 4.5.10
F5 BigIP 4.5.9
F5 BigIP 4.5.6
F5 BigIP 4.5
F5 BigIP 4.4
F5 BigIP 4.3
F5 BigIP 4.2
F5 BigIP 4.0
F5 3-DNS 4.6.2
F5 3-DNS 4.6
F5 3-DNS 4.5.12
F5 3-DNS 4.5.11
F5 3-DNS 4.5
F5 3-DNS 4.4
F5 3-DNS 4.3
F5 3-DNS 4.2
Daniel Stenberg curl 7.13
Daniel Stenberg curl 7.13
Daniel Stenberg curl 7.12.3
Daniel Stenberg curl 7.12.2
Daniel Stenberg curl 7.12.1
+ Red Hat Enterprise Linux AS 4
+ RedHat Desktop 4.0
+ RedHat Enterprise Linux ES 4
+ RedHat Enterprise Linux WS 4
Daniel Stenberg curl 7.12
+ S.u.S.E. Linux Personal 9.2 x86_64
+ S.u.S.E. Linux Personal 9.2
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
Daniel Stenberg curl 7.11.2
Daniel Stenberg curl 7.11.1
+ Conectiva Linux 10.0
Daniel Stenberg curl 7.11
+ S.u.S.E. Linux Personal 9.1 x86_64
+ S.u.S.E. Linux Personal 9.1
Daniel Stenberg curl 7.10.8
Daniel Stenberg curl 7.10.7
Daniel Stenberg curl 7.10.6
+ Red Hat Enterprise Linux AS 3
+ RedHat Desktop 3.0
+ RedHat Enterprise Linux ES 3
+ RedHat Enterprise Linux WS 3
Daniel Stenberg curl 7.10.5
Daniel Stenberg curl 7.10.4
Daniel Stenberg curl 7.10.3
Daniel Stenberg curl 7.10.2
Daniel Stenberg curl 7.10.1
Daniel Stenberg curl 7.10
Daniel Stenberg curl 7.9.8
Daniel Stenberg curl 7.9.7
Daniel Stenberg curl 7.9.6
Daniel Stenberg curl 7.9.5
Daniel Stenberg curl 7.9.4
Daniel Stenberg curl 7.9.3
Daniel Stenberg curl 7.9.2
Daniel Stenberg curl 7.9.1
Daniel Stenberg curl 7.9
Daniel Stenberg curl 7.8.1
Daniel Stenberg curl 7.8
Daniel Stenberg curl 7.7.3
Daniel Stenberg curl 7.7.2
Daniel Stenberg curl 7.7.1
Daniel Stenberg curl 7.7
Daniel Stenberg curl 7.6.1
Daniel Stenberg curl 7.6
Daniel Stenberg curl 7.5.2
Daniel Stenberg curl 7.5.1
Daniel Stenberg curl 7.5
Daniel Stenberg curl 7.4.2
Daniel Stenberg curl 7.4.1
Daniel Stenberg curl 7.4
Daniel Stenberg curl 7.3
+ RedHat PowerTools 7.0
+ RedHat PowerTools 6.2
+ RedHat PowerTools 6.1
Daniel Stenberg curl 7.2.1
Daniel Stenberg curl 7.2
Daniel Stenberg curl 7.1.1
Daniel Stenberg curl 7.1
Daniel Stenberg curl 6.5.2
Daniel Stenberg curl 6.5.1
Daniel Stenberg curl 6.5
Daniel Stenberg curl 6.4
Daniel Stenberg curl 6.3
Daniel Stenberg curl 6.2
Daniel Stenberg curl 6.1 beta
Daniel Stenberg curl 6.1
Daniel Stenberg curl 6.0
+ Debian Linux 2.2
ALT Linux ALT Linux Junior 2.3
ALT Linux ALT Linux Compact 2.3
Not Vulnerable: F5 BigIP 4.6.3
F5 BigIP 4.5.13
F5 3-DNS 4.6.3
F5 3-DNS 4.5.13
Daniel Stenberg curl 7.13.1


 

Privacy Statement
Copyright 2010, SecurityFocus