CVEvulnerability

CVE-2000-0973

10.0 HIGH Published 2000-12-19 Modified 2026-09-23 Official page ↗
Status
Modified
Published
2000-12-19
Last modified
2026-09-23
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.

Affected configurations

• daniel stenberg curl 6.0 • daniel stenberg curl 6.1 • daniel stenberg curl 6.1beta • daniel stenberg curl 6.3 • daniel stenberg curl 6.4 • daniel stenberg curl 6.5 • daniel stenberg curl 6.5.1 • daniel stenberg curl 6.5.2 • daniel stenberg curl 7.1 • daniel stenberg curl 7.1.1 • daniel stenberg curl 7.2 • daniel stenberg curl 7.2.1 • daniel stenberg curl 7.3 • daniel stenberg curl 7.4

References