CVE-2005-3863 Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers t...
HighCVSS 7.5
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ktools | <= 0.3 | No fix listed |
References
- 17768 third-party-advisory vendor-advisory
- 18081 patch third-party-advisory vendor-advisory
- 20329 third-party-advisory vendor-advisory
- 20368 patch third-party-advisory vendor-advisory
- 20446 patch third-party-advisory vendor-advisory
- 21684 third-party-advisory vendor-advisory
- GLSA-200512-11 vendor-advisory
- GLSA-200608-27 vendor-advisory
- DSA-1083 patch vendor-advisory
- DSA-1088 patch vendor-advisory
- 21161 vdb-entry
- 20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability mailing-list
- 15600 vdb-entry
- ADV-2005-2605 vdb-entry vendor-advisory
- ADV-2006-2062 vdb-entry vendor-advisory
- www.zone-h.org vendor-advisory
- ktools-kkstrtext-bo(23233) vdb-entry