CVEvulnerability
CVE-2005-3863
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
Affected configurations
• ktools ktools (<= 0.3)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/17768 Vendor Advisory
- http://secunia.com/advisories/18081 Patch, Vendor Advisory
- http://secunia.com/advisories/20329 Vendor Advisory
- http://secunia.com/advisories/20368 Patch, Vendor Advisory
- http://secunia.com/advisories/20446 Patch, Vendor Advisory
- http://secunia.com/advisories/21684 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200512-11.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200608-27.xml security.gentoo.org
- http://www.debian.org/security/2006/dsa-1083 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1088 Patch, Vendor Advisory
- http://www.osvdb.org/21161 www.osvdb.org
- http://www.securityfocus.com/archive/1/417906/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15600 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2605 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2062 Vendor Advisory
- http://www.zone-h.org/en/advisories/read/id=8480/ Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23233 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/17768 Vendor Advisory
- http://secunia.com/advisories/18081 Patch, Vendor Advisory
- http://secunia.com/advisories/20329 Vendor Advisory
- http://secunia.com/advisories/20368 Patch, Vendor Advisory
- http://secunia.com/advisories/20446 Patch, Vendor Advisory
- http://secunia.com/advisories/21684 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200512-11.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200608-27.xml security.gentoo.org
- http://www.debian.org/security/2006/dsa-1083 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1088 Patch, Vendor Advisory
- http://www.osvdb.org/21161 www.osvdb.org
- http://www.securityfocus.com/archive/1/417906/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15600 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2605 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2062 Vendor Advisory
- http://www.zone-h.org/en/advisories/read/id=8480/ Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23233 exchange.xforce.ibmcloud.com