Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and othe…

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Advisories 2

• RHSA-2005:812 Red Hat Security Advisory: wget security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
• DSA-919-2 curl - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026

References

• 20051013 Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability third-party-advisory
• 17247 third-party-advisory
• FEDORA-2005-1000 vendor-advisory
• RHSA-2005:812 vendor-advisory
• 1015057 vdb-entry
• 17813 third-party-advisory
• 17485 third-party-advisory
• ADV-2005-2659 vdb-entry
• TSLSA-2005-0059 vendor-advisory
• DSA-919 vendor-advisory
• wget-curl-ntlm-username-bo(22721) vdb-entry
• ADV-2005-2088 vdb-entry
• FEDORA-2005-1129 vendor-advisory
• 17297 third-party-advisory
• 82 third-party-advisory
• 17193 third-party-advisory
• 17403 third-party-advisory
• USN-205-1 vendor-advisory
• 17208 third-party-advisory
• SUSE-SA:2005:063 vendor-advisory
• oval:org.mitre.oval:def:9810 vdb-entry signature
• APPLE-SA-2005-11-29 vendor-advisory
• 15102 vdb-entry
• 17203 third-party-advisory
• 17965 third-party-advisory
• ADV-2005-2125 vdb-entry
• MDKSA-2005:182 vendor-advisory
• 17400 third-party-advisory
• 17192 third-party-advisory
• 15647 vdb-entry
• GLSA-200510-19 vendor-advisory
• 1015056 vdb-entry
• RHSA-2005:807 vendor-advisory
• 19193 third-party-advisory
• SSA:2005-310-01 vendor-advisory
• 17320 third-party-advisory
• 20011 vdb-entry
• 17228 third-party-advisory