Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2005-3863 | First vendor Publication | 2005-11-29 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3863 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200512-11 (CenterICQ) File : nvt/glsa_200512_11.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200608-27 (motor) File : nvt/glsa_200608_27.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1083-1 (motor) File : nvt/deb_1083_1.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1088-1 (centericq) File : nvt/deb_1088_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 21161 | ktools VGETSTRING Function Overflow A local overflow exists in ktools. The 'VGETSTRING()' function fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a malicious user can cause arbitrary code execution resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1083.nasl - Type : ACT_GATHER_INFO |
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1088.nasl - Type : ACT_GATHER_INFO |
| 2006-08-30 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200608-27.nasl - Type : ACT_GATHER_INFO |
| 2005-12-30 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200512-11.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:21:36 |
|
| 2024-11-28 12:07:44 |
|
| 2021-04-22 01:03:39 |
|
| 2020-05-23 01:37:02 |
|
| 2020-05-23 00:17:01 |
|
| 2018-10-19 21:19:41 |
|
| 2017-07-20 09:23:13 |
|
| 2016-06-28 15:25:56 |
|
| 2016-04-26 13:59:11 |
|
| 2014-02-17 10:33:43 |
|
| 2013-05-11 11:35:34 |
|
