Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

curl: heap-based buffer overflow

Package(s):

curl

CVE #(s):

CVE-2006-1061

Created:

March 21, 2006

Updated:

June 28, 2006

Description:

Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

Alerts:

OpenPKG	OpenPKG-SA-2006.012	2006-06-28
Trustix	TSLSA-2006-0016	2006-03-24
Gentoo	200603-19	2006-03-21
Fedora	FEDORA-2006-189	2006-03-21

(Log in to post comments)