CVE-2006-1061
daniel stenberg curl: no CVSS score yet. EPSS 5.3% chance of exploitation in the next 30 days.
Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.
- EPSS
- 5.3% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- daniel_stenberg:curl