CVE-2005-3185

Vendorcurl, libcurl, wgetProductcurl, libcurl, wgetDiscoveredOct 13, 2005UpdatedApr 16, 2026

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.

View graph Watch Export

CVSS v3.1

—

EPSS

5.19%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

4 relationships

CWE-119

source

Timeline

disclosure → media coverage

Oct 13, 2005

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026