« Volver al listado

CVE-2000-0973

Estado: ModificadaAlta (10)—

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Daniel Stenberg — Curl

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2000-0973",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2000-12-19T05:00:00.000",
  "references": [
    {
      "url": "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:72.curl.asc",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/1804",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5374",
      "source": "cve@mitre.org"
    },
    {
      "url": "ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:72.curl.asc",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/1804",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5374",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en curl anterior a 6.0-1.1, y curl-ssl anterior a 6.0-1.2, permite a atacantes remotos ejecutar comandos arbitrarios al forzar la generación de un mensaje de error largo."
    }
  ],
  "lastModified": "2026-09-23T10:10:00.673",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "666F4E03-9AAF-4708-A8AA-C43AB80B57DE"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0164C24-6535-4E3C-92F1-43BDF8594FD9"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.1beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "610B0EA6-4F36-4CE3-B5B2-72BF64EC8C5F"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B174FCC4-C63A-4530-A871-6D438CD8849F"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE40B979-ED1F-40CF-9296-E673F19990EA"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "559792F4-B6FF-4A90-9D1A-BA73E0157FBF"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E351F24-7E36-4D80-AC1D-C40C85611285"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:6.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BFE1EAA-5E39-42FA-8F2E-097003C05B8D"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21AEE075-CEB9-4080-B417-E0285AD2CD26"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EA5BC99-FA45-4860-B676-9C89BE882522"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69D07770-7E79-4B7C-AD6F-BB8ADDD9E270"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:7.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B94C50A-E303-475B-9545-F038D8BAD2F0"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B54972E-C1E0-4CAC-A567-5681B4BF3641"
            },
            {
              "criteria": "cpe:2.3:a:daniel_stenberg:curl:7.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7ABC917-EE6C-4C29-83AE-0414D605C85D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}