CVE-2005-3185

NameCVE-2005-3185
DescriptionStack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-919-2
Debian Bugs333734

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
curl (PTS)jessie, jessie (lts)7.38.0-4+deb8u28fixed
stretch (security)7.52.1-5+deb9u16fixed
stretch (lts), stretch7.52.1-5+deb9u22fixed
buster, buster (lts)7.64.0-4+deb10u10fixed
buster (security)7.64.0-4+deb10u9fixed
bullseye7.74.0-1.3+deb11u13fixed
bullseye (security)7.74.0-1.3+deb11u14fixed
bookworm7.88.1-10+deb12u8fixed
bookworm (security)7.88.1-10+deb12u5fixed
sid, trixie8.11.1-1fixed
wget (PTS)jessie, jessie (lts)1.16-1+deb8u7fixed
stretch (security), stretch (lts), stretch1.18-5+deb9u3fixed
buster1.20.1-1.1fixed
bullseye1.21-1+deb11u1fixed
bookworm1.21.3-1fixed
sid, trixie1.24.5-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
curlsourcewoody7.9.5-1woody2DSA-919-2
curlsourcesarge7.13.2-2sarge5DSA-919-2
curlsource(unstable)7.15.0-1medium333734
wgetsourcewoody(not affected)
wgetsourcesarge(not affected)
wgetsource(unstable)1.10.2-1medium

Notes

[sarge] - wget <not-affected> (Does not contain NTML authentication code)
[woody] - wget <not-affected> (Does not contain NTML authentication code)

Search for package or bug name: Reporting problems