• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

cURL / libcURL URL Parser Buffer Overflow Vulnerability

Solution:
Please see the referenced advisories for more information.


OpenOffice OpenOffice 1.0.1

• OpenOffice OpenOffice 2.0.2
  http://download.openoffice.org/2.0.2/index.html

OpenOffice OpenOffice 1.1.51

• OpenOffice OpenOffice 2.0.2
  http://download.openoffice.org/2.0.2/index.html

Apple Mac OS X 10.4.11

• Apple SecUpd2008-002PPC.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002PPC.dmg


• Apple SecUpd2008-002Univ.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002Univ.dmg

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2008-002PPC.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002PPC.dmg


• Apple SecUpdSrvr2008-002Univ.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002Univ.dmg

Apple Mac OS X 10.5.2

• Apple SecUpd2008-002.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002.dmg

Apple Mac OS X Server 10.5.2

• Apple SecUpdSrvr2008-002.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002.dmg

Daniel Stenberg curl 7.11.2

• Daniel Stenberg curl-7.15.1.tar.gz
  http://curl.haxx.se/download/curl-7.15.1.tar.gz


• Mandriva curl-7.13.1-2.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva curl-7.13.1-2.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lib64curl3-7.13.1-2.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lib64curl3-devel-7.13.1-2.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva libcurl3-7.13.1-2.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva libcurl3-devel-7.13.1-2.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Ubuntu libcurl2-dev_7.11.2-12ubuntu3.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2-dev_7. 11.2-12ubuntu3.3_amd64.deb


• Ubuntu libcurl2-dev_7.11.2-12ubuntu3.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2-dev_7. 11.2-12ubuntu3.3_i386.deb


• Ubuntu libcurl2-dev_7.11.2-12ubuntu3.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2-dev_7. 11.2-12ubuntu3.3_powerpc.deb


• Ubuntu libcurl2_7.11.2-12ubuntu3.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2_7.11.2 -12ubuntu3.3_amd64.deb


• Ubuntu libcurl2_7.11.2-12ubuntu3.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2_7.11.2 -12ubuntu3.3_i386.deb


• Ubuntu libcurl2_7.11.2-12ubuntu3.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl2_7.11.2 -12ubuntu3.3_powerpc.deb


• Ubuntu libcurl3-dbg_7.12.3-2ubuntu3.5_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.12.3 -2ubuntu3.5_i386.deb

Daniel Stenberg curl 7.13.1

• Daniel Stenberg curl-7.15.1.tar.gz
  http://curl.haxx.se/download/curl-7.15.1.tar.gz


• Mandriva libcurl3-devel-7.13.1-2.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva curl-7.13.1-2.1.102mdk.i586.rpm
  Mandrivalinux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva curl-7.13.1-2.1.102mdk.x86_64.rpm
  Mandrivalinux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Daniel Stenberg curl 7.14

• Daniel Stenberg curl-7.15.1.tar.gz
  http://curl.haxx.se/download/curl-7.15.1.tar.gz


• Mandriva lib64curl3-devel-7.14.0-2.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva curl-7.14.0-2.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva curl-7.14.0-2.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lib64curl3-7.14.0-2.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva lib64curl3-devel-7.14.0-2.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva libcurl3-7.14.0-2.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva libcurl3-devel-7.14.0-2.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva php-curl-5.0.4-1.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva php-curl-5.0.4-1.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Trustix curl-7.15.1-1tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix curl-7.15.1-1tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix curl-devel-7.15.1-1tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix curl-devel-7.15.1-1tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Ubuntu curl_7.14.0-2ubuntu1.2_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.14.0-2ubuntu 1.2_amd64.deb


• Ubuntu curl_7.14.0-2ubuntu1.2_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_7.14.0-2ubuntu 1.2_powerpc.deb


• Ubuntu libcurl3-dbg_7.14.0-2ubuntu1.2_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.14.0 -2ubuntu1.2_amd64.deb


• Ubuntu libcurl3-dbg_7.14.0-2ubuntu1.2_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.14.0 -2ubuntu1.2_i386.deb


• Ubuntu libcurl3-dbg_7.14.0-2ubuntu1.2_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dbg_7.14.0 -2ubuntu1.2_powerpc.deb


• Ubuntu libcurl3-dev_7.14.0-2ubuntu1.2_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.14.0 -2ubuntu1.2_amd64.deb


• Ubuntu libcurl3-dev_7.14.0-2ubuntu1.2_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.14.0 -2ubuntu1.2_i386.deb


• Ubuntu libcurl3-dev_7.14.0-2ubuntu1.2_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3-dev_7.14.0 -2ubuntu1.2_powerpc.deb


• Ubuntu libcurl3-gssapi_7.14.0-2ubuntu1.2_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl3-gssapi _7.14.0-2ubuntu1.2_amd64.deb


• Ubuntu libcurl3-gssapi_7.14.0-2ubuntu1.2_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl3-gssapi _7.14.0-2ubuntu1.2_i386.deb


• Ubuntu libcurl3-gssapi_7.14.0-2ubuntu1.2_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/universe/c/curl/libcurl3-gssapi _7.14.0-2ubuntu1.2_powerpc.deb


• Ubuntu libcurl3_7.14.0-2ubuntu1.2_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.14.0-2ub untu1.2_amd64.deb


• Ubuntu libcurl3_7.14.0-2ubuntu1.2_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.14.0-2ub untu1.2_i386.deb


• Ubuntu libcurl3_7.14.0-2ubuntu1.2_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3_7.14.0-2ub untu1.2_powerpc.deb

Daniel Stenberg curl 7.15

• Daniel Stenberg curl-7.15.1.tar.gz
  http://curl.haxx.se/download/curl-7.15.1.tar.gz