CVE-2005-3185: Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2,...

Security readout for executives and security teams

This is an old client-side remote code execution issue in wget, curl, and libcurl when NTLM authentication is used. A malicious or compromised server could trigger a stack buffer overflow by supplying conditions involving an overly long NTLM username, potentially running code on the client system. Exposure is most plausible on legacy systems still running the named 2005-era wget, curl, or libcurl versions with NTLM authentication enabled, including embedded products that bundled vulnerable libcurl. Treat as high priority where legacy systems still use NTLM-capable wget, curl, or libcurl. The issue is old, but arbitrary code execution against clients remains business-relevant if unsupported software or embedded dependencies persist. Mitigation focus: Upgrade wget, curl, and libcurl using applicable vendor security advisories.; Inventory applications and appliances that bundle libcurl independently of the operating system.; Disable NTLM authentication in affected clients where operationally feasible..

Prepared

Jun 29, 2026, 17:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.