VYPR
Unrated severityNVD Advisory· Published Mar 21, 2006· Updated Jun 16, 2026

CVE-2006-1061

CVE-2006-1061

Description

Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • C Ares/Curl3 versions
    cpe:2.3:a:daniel_stenberg:curl:7.15.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:daniel_stenberg:curl:7.15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:daniel_stenberg:curl:7.15.1:*:*:*:*:*:*:*
    • cpe:2.3:a:daniel_stenberg:curl:7.15.2:*:*:*:*:*:*:*
  • Curl/Libcurlllm-fuzzy
    Range: >=7.15.0 <=7.15.2
  • Curl/Curlllm-fuzzy
    Range: >=7.15.0 <=7.15.2

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.