curl vulnerability
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 17h
The User is Offline
curl vulnerability
Feb 09, 2013 - 16:15:51 (13y 265d)
Feb 09, 2013 - 16:15:51 (13y 265d)
Hello,
I want to warn you about a vulnerability in curl.
There exists a buffer overflow in the email protocols, pop3, imap and other.
If a user can submit urls which you pass into curl, please note that the server may answer with a redirect to these protocols
If you cannot upgrade curl easily, i recommend patching your requests with
curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP|CURLPROTO_HTTPS);
I want to warn you about a vulnerability in curl.
There exists a buffer overflow in the email protocols, pop3, imap and other.
If a user can submit urls which you pass into curl, please note that the server may answer with a redirect to these protocols
If you cannot upgrade curl easily, i recommend patching your requests with
curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP|CURLPROTO_HTTPS);
The geeks shall inherit the properties and methods of object earth.
quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 3381 times.
1 people are watching the thread at the moment.
This thread has been viewed 3381 times.