CVEvulnerability
CVE-2005-0011
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.
Affected configurations
• kde kde 3.3
• kde kde 3.3.1
• kde kde 3.3.2
References
- http://secunia.com/advisories/14306 Patch
- http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml Vendor Advisory
- http://www.kde.org/info/security/advisory-20050215-1.txt Patch, Vendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html Vendor Advisory
- http://secunia.com/advisories/14306 Patch
- http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml Vendor Advisory
- http://www.kde.org/info/security/advisory-20050215-1.txt Patch, Vendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html Vendor Advisory