Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个UNIX/LINUX厂商cURL/libcURL Kerberos验证缓冲区溢出漏洞
Vulnerability Description
cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 cURL在处理Kerberos验证时存在一个基于栈的缓冲区溢出，远程攻击者可以利用这个漏洞以进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A