HIGH
security flaw
Published Oct 13, 2005
7.5
HIGHCVSS 2.0
EPSS 5.19%
Description
Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.
Affected products
No data.
No data.
Red Hat Enterprise Linux 3
curl-0:7.10.6-7.rhel3
Fixed · RHSA-2005:807
Red Hat Enterprise Linux 3
wget-0:1.10.2-0.30E
Fixed · RHSA-2005:812
Red Hat Enterprise Linux 4
curl-0:7.12.1-6.rhel4
Fixed · RHSA-2005:807
Red Hat Enterprise Linux 4
wget-0:1.10.2-0.40E
Fixed · RHSA-2005:812
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 3 | curl-0:7.10.6-7.rhel3 | Fixed | RHSA-2005:807 |
| Red Hat Enterprise Linux 3 | wget-0:1.10.2-0.30E | Fixed | RHSA-2005:812 |
| Red Hat Enterprise Linux 4 | curl-0:7.12.1-6.rhel4 | Fixed | RHSA-2005:807 |
| Red Hat Enterprise Linux 4 | wget-0:1.10.2-0.40E | Fixed | RHSA-2005:812 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
7.5 HIGH NVD
AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
5.19% 0.05188
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.05188
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (10 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 5.19% (0.05188) | 92.21th | v5 (v2026.06.15) |
| Jun 15, 2026 | 5.19% (0.05188) | 91.37th | v5 (v2026.06.15) |
| Mar 30, 2025 | 5.12% (0.05123) | 88.86th | v4 (v2025.03.14) |
| Mar 29, 2025 | 12.53% (0.12527) | 89.87th | v4 (v2025.03.14) |
| Mar 17, 2025 | 5.12% (0.05123) | 89.10th | v4 (v2025.03.14) |
| Dec 12, 2024 | 1.80% (0.01797) | 88.61th | v3 (v2023.03.01) |
| Mar 7, 2023 | 2.28% (0.02279) | 87.90th | v3 (v2023.03.01) |
| Mar 6, 2023 | 4.42% (0.04421) | 88.21th | v2 (v2022.01.01) |
| Apr 1, 2022 | 4.42% (0.04421) | 87.03th | v2 (v2022.01.01) |
| Feb 4, 2022 | 4.42% (0.04421) | 70.83th | v2 (v2022.01.01) |
Weaknesses (1)
References (43)
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt vendor-advisoryx_refsource_SCO
- http://docs.info.apple.com/article.html?artnum=302847 vendor-advisoryx_refsource_APPLE
- http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html vendor-advisoryx_refsource_TRUSTIX
- http://secunia.com/advisories/17192 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17193 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17203 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17208 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17228 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17247 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17297 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17320 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17400 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17403 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17485 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17813 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/17965 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19193 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://securityreason.com/securityalert/82 third-party-advisoryx_refsource_SREASON
- http://securitytracker.com/id?1015056 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1015057 vdb-entryx_refsource_SECTRACK
- http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.519010 vendor-advisoryx_refsource_SLACKWARE
- http://www.debian.org/security/2005/dsa-919 vendor-advisoryx_refsource_DEBIAN
- http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml vendor-advisoryx_refsource_GENTOO
- http://www.idefense.com/application/poi/display?id=322&type=vulnerabilities third-party-advisoryx_refsource_IDEFENSEPatchVendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:182 vendor-advisoryx_refsource_MANDRIVA
- http://www.novell.com/linux/security/advisories/2005_63_wget_curl.html vendor-advisoryx_refsource_SUSE
- http://www.osvdb.org/20011 vdb-entryx_refsource_OSVDB
- http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00020.html vendor-advisoryx_refsource_FEDORA
- http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00055.html vendor-advisoryx_refsource_FEDORA
- http://www.redhat.com/support/errata/RHSA-2005-807.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2005-812.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/15102 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/15647 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2005/2088 vdb-entryx_refsource_VUPENVendor Advisory
- http://www.vupen.com/english/advisories/2005/2125 vdb-entryx_refsource_VUPENVendor Advisory
- http://www.vupen.com/english/advisories/2005/2659 vdb-entryx_refsource_VUPENVendor Advisory
- https://access.redhat.com/security/cve/CVE-2005-3185 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1617794 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22721 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2005-3185
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9810 vdb-entrysignaturex_refsource_OVAL
- https://usn.ubuntu.com/205-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.cve.org/CVERecord?id=CVE-2005-3185
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 13, 2005
Updated Aug 7, 2024
Reserved Oct 12, 2005
Link CVE-2005-3185
CISA Vulnrichment
Updated n/a