OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2005.028
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2005.028
Advisory Published:      2008-08-07 21:57 UTC

Issue Id (internal):     OpenPKG-SI-20051210.01
Issue First Created:     2005-12-10
Issue Last Modified:     2006-11-28
Issue Revision:          06


Subject Name:            curl
Subject Summary:         Batch Client for HTTP, HTTPS, FTP, LDAP and DICT
                         protocol
Subject Home:            http://curl.haxx.se/
Subject Versions:        * <= 7.15.0

Vulnerability Id:        CVE-2005-4077
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           remote network
Attack Impact:           denial of service

Description:
    According to a vendor security advisory [0], a Denial of Service (DoS)
    vulnerability exist in "libcurl", the underlying library of the cURL
    [1] networking tool.
    
    Two off-by-one errors in libcurl's URL parser allow a buffer overflow
    and cause a DoS via certain URLs that (1) are malformed in a way
    that prevents a terminating NUL byte from being added to either
    a hostname or path buffer, or (2) contain a "?" separator in the
    hostname portion, which causes a "/" to be prepended to the resulting
    string.

References:
    [0] http://curl.haxx.se/docs/adv_20051207.html
    [1] http://curl.haxx.se/
    [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4077


Primary Package Name:    curl
Primary Package Home:    http://openpkg.org/go/package/curl

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Community        2.3-SOLID         curl-7.13.0-2.3.1
OpenPKG Community        2.3-SOLID         openpkg-2.3.5-2.3.5
OpenPKG Community        2.4-SOLID         curl-7.14.0-2.4.1
OpenPKG Community        2.4-SOLID         openpkg-2.4.2-2.4.2
OpenPKG Community        2.5-SOLID         curl-7.15.0-2.5.0
OpenPKG Community        2.5-SOLID         openpkg-2.5.0-2.5.0
OpenPKG Community        CURRENT           curl-7.15.0-20051206
OpenPKG Community        CURRENT           openpkg-20051206-20051206

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Community        2.3-SOLID         curl-7.13.0-2.3.2
OpenPKG Community        2.3-SOLID         openpkg-2.3.6-2.3.6
OpenPKG Community        2.4-SOLID         curl-7.14.0-2.4.2
OpenPKG Community        2.4-SOLID         openpkg-2.4.3-2.4.3
OpenPKG Community        2.5-SOLID         curl-7.15.0-2.5.1
OpenPKG Community        2.5-SOLID         openpkg-2.5.1-2.5.1
OpenPKG Community        CURRENT           curl-7.15.1-20051207
OpenPKG Community        CURRENT           openpkg-20051207-20051207