CVE-2005-3185: Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and

This month

HIGH 7.5DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2005-3185 is a high-severity flaw (CVSS 7.5) affecting curl, libcurl, wget. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.

Why this priority

High severity
EPSS top 8%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.5 (High)
EPSS exploit chance	5.2% (top 8%)
CISA exploited list	No
Weakness	CWE-119
Published	2005-10-13
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: curl · libcurl · wget

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2005-10-13 22:02 UTCPublished CVE record published
2026-06-16 22:16 UTCUpdated Record last modified

curl curl DOWNGRADE

Affected: 7.13.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.13.2

1. Check installed version

apt-cache policy curl || rpm -q curl || curl --version

2. No fixed release: DOWNGRADE to a release before 7.13.2 (Debian / Ubuntu)

apt-cache madison curl sudo apt install curl=<VERSION_BEFORE_7.13.2> sudo apt-mark hold curl

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list curl sudo dnf downgrade curl-<VERSION_BEFORE_7.13.2> sudo dnf versionlock add curl

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

libcurl libcurl DOWNGRADE

Affected: 7.13.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.13.2

1. Check installed version

apt-cache policy libcurl || rpm -q libcurl || libcurl --version

2. No fixed release: DOWNGRADE to a release before 7.13.2 (Debian / Ubuntu)

apt-cache madison libcurl sudo apt install libcurl=<VERSION_BEFORE_7.13.2> sudo apt-mark hold libcurl

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list libcurl sudo dnf downgrade libcurl-<VERSION_BEFORE_7.13.2> sudo dnf versionlock add libcurl

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

wget wget DOWNGRADE

Affected: 1.10

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.10

1. Check installed version

apt-cache policy wget || rpm -q wget || wget --version

2. No fixed release: DOWNGRADE to a release before 1.10 (Debian / Ubuntu)

apt-cache madison wget sudo apt install wget=<VERSION_BEFORE_1.10> sudo apt-mark hold wget

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list wget sudo dnf downgrade wget-<VERSION_BEFORE_1.10> sudo dnf versionlock add wget

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2005-3185?

curl: downgrade or apply the listed mitigation; libcurl: downgrade or apply the listed mitigation; wget: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2005-3185 being exploited?

CVE-2005-3185 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2005-3185 affect?

CVE-2005-3185 affects curl, libcurl, wget. Severity is high (CVSS 7.5). Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute ar

How urgent is CVE-2005-3185?

Priority 49/100. High severity; EPSS top 8%: very likely to be exploited

Software pages

curl vulnerabilities

Related CVEs

CVE-2022-27779 MEDIUM 5.3 UPGRADE MITIGATE libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trail
CVE-2020-8169 HIGH 7.5 UPGRADE UPGRADE curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial
CVE-2023-23915 MEDIUM 6.5 UPGRADE MITIGATE A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS
CVE-2023-27534 HIGH 8.8 UPGRADE MITIGATE A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be
CVE-2023-28319 HIGH 7.5 UPGRADE UPGRADE A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH ser

References

← Back to latest CVEs