CVE-2005-0490: Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote...

Security readout for executives and security teams

This is an old cURL/libcURL memory-safety flaw where a malicious web server could trigger code execution in clients using vulnerable NTLM or Kerberos authentication handling. Business risk is mainly legacy systems, embedded products, and statically linked applications that still carry vulnerable 2005-era cURL code. Exposure is most likely on legacy Unix/Linux systems, appliances, containers, or applications using old libcurl builds, especially where NTLM or Kerberos authentication is enabled for HTTP connections. Treat as a legacy exposure cleanup item with high impact if present. Prioritize internet-facing workflows, authentication clients, appliances, and embedded systems that may still run outdated cURL/libcURL code. Mitigation focus: Inventory curl and libcurl versions across hosts, containers, and appliances.; Apply relevant vendor updates from the listed distro and vendor advisories.; Check statically linked applications that may embed old libcurl code..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.