curl / Docs / Vulnerability table / 6.3 vulnerabilities

Vulnerabilities in curl 6.3

curl version 6.3 was released on November 10 1999. The following 18 security problems are known to exist in this version.

Flaw	From version	To and including
control code in cookie denial of service	4.9	7.84.0
Auth/cookie leak on redirect	4.9	7.82.0
Credential leak on redirect	4.9	7.82.0
trusting FTP PASV responses	4.0	7.73.0
HTTP authentication leak in redirects	6.0	7.57.0
printf floating point buffer overflow	5.4	7.51.0
cookie injection for other servers	4.9	7.50.3
double free in curl_maprintf	5.4	7.50.3
invalid URL parsing with '#'	6.0	7.50.3
TLS session resumption client cert bypass	5.0	7.50.0
remote file name path traversal in curl tool for Windows	4.0	7.46.0
sensitive HTTP server headers also sent to proxies	4.0	7.42.0
URL request injection	6.0	7.39.0
cookie leak with IP address as domain	4.0	7.37.1
cookie domain tailmatch	4.7	7.29.0
Arbitrary File Access	5.11	7.19.3
Proxy Authentication Header Information Leakage	4.5	7.10.6
FTP Server Response Buffer Overflow	6.0	7.4

CVE data for 6.3 provided as JSON.