CVE-2013-0249
curl and libcurl 7.26.0-7.28.1 - Stack-Based Buffer Overflow via SASL DIGEST-MD5 Realm Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-0249. PoCs published by Volema.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow in libcurl's POP3/SMTP SASL DIGEST-MD5 authentication handling (CVE-2013-0249). The PoC sets up a malicious POP3 server that sends an oversized 'realm' parameter, triggering a stack-based overflow in Curl_sasl_create_digest_md5_message().
Description
Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
Exploits (1)
This exploit demonstrates a buffer overflow in libcurl's POP3/SMTP SASL DIGEST-MD5 authentication handling (CVE-2013-0249). The PoC sets up a malicious POP3 server that sends an oversized 'realm' parameter, triggering a stack-based overflow in Curl_sasl_create_digest_md5_message().