Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Curl | Daniel_stenberg | 6.0 (including) | 6.0 (including) |
| Curl | Daniel_stenberg | 6.1 (including) | 6.1 (including) |
| Curl | Daniel_stenberg | 6.1beta (including) | 6.1beta (including) |
| Curl | Daniel_stenberg | 6.3 (including) | 6.3 (including) |
| Curl | Daniel_stenberg | 6.4 (including) | 6.4 (including) |
| Curl | Daniel_stenberg | 6.5 (including) | 6.5 (including) |
| Curl | Daniel_stenberg | 6.5.1 (including) | 6.5.1 (including) |
| Curl | Daniel_stenberg | 6.5.2 (including) | 6.5.2 (including) |
| Curl | Daniel_stenberg | 7.1 (including) | 7.1 (including) |
| Curl | Daniel_stenberg | 7.1.1 (including) | 7.1.1 (including) |
| Curl | Daniel_stenberg | 7.2 (including) | 7.2 (including) |
| Curl | Daniel_stenberg | 7.2.1 (including) | 7.2.1 (including) |
| Curl | Daniel_stenberg | 7.3 (including) | 7.3 (including) |
| Curl | Daniel_stenberg | 7.4 (including) | 7.4 (including) |