critical10.0Public exploit code
CVE-2000-0973
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- cURL 6.1 < 7.4 - Remote Buffer Overflow (2)2000-10-13 · remote · linux · Verified
- cURL 6.1 < 7.4 - Remote Buffer Overflow (1)2000-10-13 · remote · freebsd · Verified
Impact
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daniel Stenberg | Curl | Versions 6.0, 6.1, 6.1beta, 6.3, 6.4, 6.5 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html
- http://www.securityfocus.com/bid/1804
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5374
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html
- http://www.securityfocus.com/bid/1804
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5374