CVE-2005-3185: Buffer Overflow
Published Oct 13, 2005
·Updated
Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
Affected Software
3 affected components
curl curl=7.13.2
libcurl libcurl=7.13.2
wget wget=1.10
Remediation
Event History
Oct 13, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3185?
CVE-2005-3185 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2005-3185?
To fix CVE-2005-3185, update wget to version 1.10.1, curl to version 7.13.3, or the relevant version of libcurl.
3
Which software is affected by CVE-2005-3185?
CVE-2005-3185 affects wget version 1.10, curl version 7.13.2, and libcurl version 7.13.2.
4
What type of vulnerability is CVE-2005-3185?
CVE-2005-3185 is a stack-based buffer overflow vulnerability.
5
What does CVE-2005-3185 allow attackers to do?
CVE-2005-3185 allows attackers to execute arbitrary code on a vulnerable system via a long NTLM username.