curl / Docs / Vulnerability table / 6.0 vulnerabilities

Vulnerabilities in curl 6.0

curl version 6.0 was released on September 13 1999. The following 6 security problems are known to exist in this version.

Flaw	From version	To and including	CVE	CWE
trusting FTP PASV responses	4.0	7.73.0	CVE-2020-8284	CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
HTTP authentication leak in redirects	6.0	7.57.0	CVE-2018-1000007	CWE-522: Insufficiently Protected Credentials
URL request injection	6.0	7.39.0	CVE-2014-8150	CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
cookie domain tailmatch	6.0	7.29.0	CVE-2013-1944	CWE-201: Information Exposure Through Sent Data
Arbitrary File Access	6.0	7.19.3	CVE-2009-0037	CWE-142: Improper Neutralization of Value Delimiters
FTP Server Response Buffer Overflow	6.0	7.4	CVE-2000-0973	CWE-121: Stack-based Buffer Overflow

See vulnerability summary for or the subsequent release: 6.1