CVE-2000-0973

CVE-2000-0973

High · published December 19, 2000

CVSS v2.0
10.0
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

⚠️ A lengthy error message is the key to exploiting this vulnerability in earlier versions of curl! An attacker can use it to trigger a buffer overflow — that’s like rolling out a red carpet for unwanted guests! Think of curl like a restaurant that serves only a limited number of dishes — if a customer orders an impossibly long special, the kitchen might overflow with too many ingredients. This overflow can lead to chaos, allowing sneaky chefs (or attackers) to change the menu entirely! If successfully exploited, this buffer overflow could allow attackers to execute arbitrary commands on the server. This means they could gain unauthorized access and control over the system, potentially leading to data breaches or service disruptions. Quite a mess for any establishment!

Put simply

Think of curl like a restaurant that serves only a limited number of dishes — if a customer orders an impossibly long special, the kitchen might overflow with too many ingredients. This overflow can lead to chaos, allowing sneaky chefs (or attackers) to change the menu entirely! This vulnerability in curl versions earlier than 6.0-1.1 and curl-ssl earlier than 6.0-1.2 results from insufficient handling of overly long error messages, which can lead to a buffer overflow and allow remote code execution.

What to do

If successfully exploited, this buffer overflow could allow attackers to execute arbitrary commands on the server. This means they could gain unauthorized access and control over the system, potentially leading to data breaches or service disruptions. Quite a mess for any establishment! To protect against this vulnerability, update curl to version 6.0-1.1 or later, and curl-ssl to version 6.0-1.2 or later. Regularly audit your software to ensure you're running secure versions. Don't let long messages wreak havoc! You’ve got this! By updating to safer versions, you’ll be a hero in keeping your systems secure! 🛡️

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.18076 · 97.2th percentile
Published
2000-12-19T10:00Z
Affected products (14)
ProductVersionsFixed in
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
daniel_stenberg/curlall versions—
References (8)
EPSS history
Timeline
  • 22 JAN 05:00Z
    Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error…
    cvelistv5