Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 114729 - net-misc/curl-7.15.0 URL Parsing Vulnerability
Summary: net-misc/curl-7.15.0 URL Parsing Vulnerability
Status: RESOLVED DUPLICATE of bug 114710
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://www.hardened-php.net/advisory_...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-12-07 04:07 UTC by Andreas Korthaus
Modified: 2011-10-30 22:39 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Korthaus 2005-12-07 04:07:42 UTC
Advisory: libcurl URL Parsing Vulnerability
 Release Date: 2005/12/07
Last Modified: 2005/12/07
       Author: Stefan Esser [sesser@hardened-php.net]

  Application: Curl    <= 7.15.0
               libcurl <= 7.15.0
     Severity: When (lib)Curl tries to parse a certain kind of 
               malformed URLs this leads to a heap overflow
         Risk: Low
Vendor Status: Vendor has released an updated version
   References: http://www.hardened-php.net/advisory_242005.109.html



curl advisory: http://curl.haxx.se/docs/adv_20051207.html
release notes: http://curl.haxx.se/changes.html
Comment 1 Stefan Cornelius (RETIRED) gentoo-dev 2005-12-07 04:09:58 UTC

*** This bug has been marked as a duplicate of 114710 ***