Exploit for cURL/libcURL 7.19.3 - HTTP 'Location:' Redirect Security Bypass

CVE-2009-0037

exploitdb · 2009-03-03

Description

cURL/libcURL 7.19.3 - HTTP 'Location:' Redirect Security Bypass vulnerabilit

Affected Curl versions

Curl= 5.11, 6.0, 6.1beta, 6.2, 6.3, 6.3.1, 6.4, 6.5, 6.5.1, 6.5.2, 7.1, 7.1.1, 7.2, 7.2.1, 7.3, 7.4, 7.4.1, 7.4.2, 7.5, 7.5.1, 7.5.2, 7.6, 7.6.1, 7.7, 7.7.1, 7.7.2, 7.7.3, 7.8, 7.8.1, 7.8.2, 7.9, 7.9.1, 7.9.2, 7.9.3, 7.9.4, 7.9.5, 7.9.6, 7.9.7, 7.9.8, 7.10

All known vulnerabilities by product

Red Hat Curl Libcurl

CVSS 6.8 for CVE-2009-0037

6.8

MEDIUM SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Score

1.6%higher than 87.1% of all CVEs

Updated 2024-12-17

Exploit Details

Modified:2014-04-13 00:00

Last Seen:2026-07-24 05:38

Reporter:David Kierznowski

Other exploits for CVE-2009-0037

cURL/libcURL HTTP Location:重新定向绕过安全限制漏洞

2009-03-05 RootSEEBUG

Exploit Code

MARKDOWN11 lines

## https://sploitus.com/exploit?id=EDB-ID:32834
source: https://www.securityfocus.com/bid/33962/info

cURL/libcURL is prone to a security-bypass vulnerability.

Remote attackers can exploit this issue to bypass certain security restrictions and carry out various attacks.

This issue affects cURL/libcURL 5.11 through 7.19.3. Other versions may also be vulnerable.

The following example redirection request may be used to carry out this attack:
Location: scp://name:passwd@host/a'``;date >/tmp/test``;'

Exploit Code

Share

Share on social media: