Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多家厂商Wget/Curl NTLM用户名处理溢出漏洞
Vulnerability Description
GNU wget是用于使用HTTP、HTTPS和FTP协议检索文件的免费软件包；curl是使用URL语法传输文件的命令行工具。 wget 1.10， curl 7.13.2，libcurl 7.13 'http-ntlm.c'文件中的ntlm-output 函数存在栈溢出漏洞，当NTLMS设置成启用状态时，允许攻击者通过长NTLM用户名执行任意代码。 在进行内存拷贝操作中没有对用户提供的数据执行充分的边界检查，将用户提供的ntlm memcpy()到ntlmbuf会导致栈溢出： /* size is no
CVSS Information
N/A
Vulnerability Type
N/A