CVE-2009-0037

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-03-05 · updated 2026-06-16
Weakness: CWE-352

Description

The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.

Affected products

Curl: 5.11, 6.0, 6.1beta, 6.2, 6.3, 6.3.1 (+58)
curl Libcurl: 5.11, 7.12, 7.12.1, 7.12.2, 7.12.3, 7.13 (+10)

References

http://curl.haxx.se/docs/adv_20090303.html
http://curl.haxx.se/lxr/source/CHANGES
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
http://lists.vmware.com/pipermail/security-announce/2009/000060.html
http://secunia.com/advisories/34138
http://secunia.com/advisories/34202
http://secunia.com/advisories/34237
http://secunia.com/advisories/34251
http://secunia.com/advisories/34255
http://secunia.com/advisories/34259
http://secunia.com/advisories/34399

Get alerted when CVE-2009-0037 or the next vulnerability affects your stack