CVE-2005-3185: Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use…

PriorityP339high7.5CVSS 2.0

AVNACLAuNCPIPAP

EPSS

5.19%

91.5th percentile

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
curl	curl	—	—
debian	curl	< curl 7.15.0-1 (bookworm)	curl 7.15.0-1 (bookworm)
debian	wget	< curl 7.15.0-1 (bookworm)	curl 7.15.0-1 (bookworm)
gnu	wget	>= 0 < 1.10.2-1	1.10.2-1
gnu	wget	>= 0 < 1.10.2-1	1.10.2-1
gnu	wget	>= 0 < 1.10.2-1	1.10.2-1
gnu	wget	>= 0 < 1.10.2-1	1.10.2-1
haxx	curl	>= 0 < 7.15.0-1	7.15.0-1
haxx	curl	>= 0 < 7.15.0-1	7.15.0-1
haxx	curl	>= 0 < 7.15.0-1	7.15.0-1
haxx	curl	>= 0 < 7.15.0-1	7.15.0-1
libcurl	libcurl	—	—
wget	wget	—	—

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

osv7.5HIGH

vendor_debian7.5MEDIUM

vendor_redhat7.5HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.