Skip to content
OpenAdvisories
Unscored DSA-1738-1 1 CVE

curl - arbitrary file access

Published Mar 11, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 curl 7.15.5-1etch2
Debian · 5.0 curl 7.18.2-8lenny2

Vulnerabilities 1

  • Unscored —
    CVE-2009-0037 Public exploit

    The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts ar…