GLSA 200503-20: curl: NTLM response buffer overflow

http://security.gentoo.org/

Severity:	normal
Title:	curl: NTLM response buffer overflow
Date:	03/16/2005
Bugs:	#82534
ID:	200503-20

Synopsis

curl is vulnerable to a buffer overflow which could lead to the execution of arbitrary code.

Background

curl is a command line tool for transferring files via many different protocols.

Affected packages

Package	Vulnerable	Unaffected	Architecture(s)
net-misc/curl	< 7.13.1	>= 7.13.1	All supported architectures

Description

curl fails to properly check boundaries when handling NTLM authentication.

Impact

With a malicious server an attacker could send a carefully crafted NTLM response to a connecting client leading to the execution of arbitrary code with the permissions of the user running curl.

Workaround

Disable NTLM authentication by not using the --anyauth or --ntlm options.

Resolution

All curl users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-misc/curl-7.13.1"

References

CAN-2005-0490

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200503-20.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.