Search criteria

3 vulnerabilities found for ktools by ktools

FKIE_CVE-2005-3863

Vulnerability from fkie_nvd - Published: 2005-11-29 11:03 - Updated: 2025-04-03 01:03
Severity ?
Summary
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
References
cve@mitre.orghttp://secunia.com/advisories/17768Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/18081Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/20329Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/20368Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/20446Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/21684Vendor Advisory
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-200512-11.xml
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-200608-27.xml
cve@mitre.orghttp://www.debian.org/security/2006/dsa-1083Patch, Vendor Advisory
cve@mitre.orghttp://www.debian.org/security/2006/dsa-1088Patch, Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/21161
cve@mitre.orghttp://www.securityfocus.com/archive/1/417906/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/15600
cve@mitre.orghttp://www.vupen.com/english/advisories/2005/2605Vendor Advisory
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/2062Vendor Advisory
cve@mitre.orghttp://www.zone-h.org/en/advisories/read/id=8480/Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/23233
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/17768Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18081Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20329Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20368Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20446Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21684Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200512-11.xml
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200608-27.xml
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2006/dsa-1083Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2006/dsa-1088Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/21161
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/417906/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/15600
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2005/2605Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2062Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.zone-h.org/en/advisories/read/id=8480/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/23233
Impacted products
Vendor Product Version
ktools ktools *

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ktools:ktools:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CC84E5D-A721-4186-8717-206A5A4963DF",
              "versionEndIncluding": "0.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."
    }
  ],
  "id": "CVE-2005-3863",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-11-29T11:03:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17768"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18081"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20329"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20368"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20446"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21684"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2006/dsa-1083"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2006/dsa-1088"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/21161"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/15600"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2005/2605"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/2062"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17768"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18081"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20329"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20368"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20446"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21684"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2006/dsa-1083"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2006/dsa-1088"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/21161"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/15600"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2005/2605"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/2062"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2005-3863 (GCVE-0-2005-3863)

Vulnerability from cvelistv5 – Published: 2005-11-29 11:00 – Updated: 2024-08-07 23:24
VLAI?
Summary
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://secunia.com/advisories/21684 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17768 third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/2062 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/20368 third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200608-27.xml vendor-advisoryx_refsource_GENTOO
http://security.gentoo.org/glsa/glsa-200512-11.xml vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2006/dsa-1088 vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/15600 vdb-entryx_refsource_BID
http://secunia.com/advisories/20446 third-party-advisoryx_refsource_SECUNIA
http://www.zone-h.org/en/advisories/read/id=8480/ x_refsource_MISC
http://secunia.com/advisories/20329 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.debian.org/security/2006/dsa-1083 vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2005/2605 vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/417906/100… mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/21161 vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/18081 third-party-advisoryx_refsource_SECUNIA
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.562Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "21684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21684"
          },
          {
            "name": "17768",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17768"
          },
          {
            "name": "ADV-2006-2062",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2062"
          },
          {
            "name": "20368",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20368"
          },
          {
            "name": "GLSA-200608-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
          },
          {
            "name": "GLSA-200512-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
          },
          {
            "name": "DSA-1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1088"
          },
          {
            "name": "15600",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15600"
          },
          {
            "name": "20446",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20446"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
          },
          {
            "name": "20329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20329"
          },
          {
            "name": "ktools-kkstrtext-bo(23233)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
          },
          {
            "name": "DSA-1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1083"
          },
          {
            "name": "ADV-2005-2605",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2605"
          },
          {
            "name": "20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
          },
          {
            "name": "21161",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/21161"
          },
          {
            "name": "18081",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18081"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "21684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21684"
        },
        {
          "name": "17768",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17768"
        },
        {
          "name": "ADV-2006-2062",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2062"
        },
        {
          "name": "20368",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20368"
        },
        {
          "name": "GLSA-200608-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
        },
        {
          "name": "GLSA-200512-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
        },
        {
          "name": "DSA-1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1088"
        },
        {
          "name": "15600",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15600"
        },
        {
          "name": "20446",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20446"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
        },
        {
          "name": "20329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20329"
        },
        {
          "name": "ktools-kkstrtext-bo(23233)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
        },
        {
          "name": "DSA-1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1083"
        },
        {
          "name": "ADV-2005-2605",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2605"
        },
        {
          "name": "20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
        },
        {
          "name": "21161",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/21161"
        },
        {
          "name": "18081",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18081"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3863",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "21684",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21684"
            },
            {
              "name": "17768",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17768"
            },
            {
              "name": "ADV-2006-2062",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2062"
            },
            {
              "name": "20368",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20368"
            },
            {
              "name": "GLSA-200608-27",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
            },
            {
              "name": "GLSA-200512-11",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
            },
            {
              "name": "DSA-1088",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1088"
            },
            {
              "name": "15600",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15600"
            },
            {
              "name": "20446",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20446"
            },
            {
              "name": "http://www.zone-h.org/en/advisories/read/id=8480/",
              "refsource": "MISC",
              "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
            },
            {
              "name": "20329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20329"
            },
            {
              "name": "ktools-kkstrtext-bo(23233)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
            },
            {
              "name": "DSA-1083",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1083"
            },
            {
              "name": "ADV-2005-2605",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2605"
            },
            {
              "name": "20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
            },
            {
              "name": "21161",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/21161"
            },
            {
              "name": "18081",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18081"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3863",
    "datePublished": "2005-11-29T11:00:00",
    "dateReserved": "2005-11-29T00:00:00",
    "dateUpdated": "2024-08-07T23:24:36.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3863 (GCVE-0-2005-3863)

Vulnerability from nvd – Published: 2005-11-29 11:00 – Updated: 2024-08-07 23:24
VLAI?
Summary
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://secunia.com/advisories/21684 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17768 third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/2062 vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/20368 third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200608-27.xml vendor-advisoryx_refsource_GENTOO
http://security.gentoo.org/glsa/glsa-200512-11.xml vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2006/dsa-1088 vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/15600 vdb-entryx_refsource_BID
http://secunia.com/advisories/20446 third-party-advisoryx_refsource_SECUNIA
http://www.zone-h.org/en/advisories/read/id=8480/ x_refsource_MISC
http://secunia.com/advisories/20329 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.debian.org/security/2006/dsa-1083 vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2005/2605 vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/417906/100… mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/21161 vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/18081 third-party-advisoryx_refsource_SECUNIA
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.562Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "21684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21684"
          },
          {
            "name": "17768",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17768"
          },
          {
            "name": "ADV-2006-2062",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2062"
          },
          {
            "name": "20368",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20368"
          },
          {
            "name": "GLSA-200608-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
          },
          {
            "name": "GLSA-200512-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
          },
          {
            "name": "DSA-1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1088"
          },
          {
            "name": "15600",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15600"
          },
          {
            "name": "20446",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20446"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
          },
          {
            "name": "20329",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20329"
          },
          {
            "name": "ktools-kkstrtext-bo(23233)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
          },
          {
            "name": "DSA-1083",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1083"
          },
          {
            "name": "ADV-2005-2605",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2605"
          },
          {
            "name": "20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
          },
          {
            "name": "21161",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/21161"
          },
          {
            "name": "18081",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18081"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "21684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21684"
        },
        {
          "name": "17768",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17768"
        },
        {
          "name": "ADV-2006-2062",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2062"
        },
        {
          "name": "20368",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20368"
        },
        {
          "name": "GLSA-200608-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
        },
        {
          "name": "GLSA-200512-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
        },
        {
          "name": "DSA-1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1088"
        },
        {
          "name": "15600",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15600"
        },
        {
          "name": "20446",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20446"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
        },
        {
          "name": "20329",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20329"
        },
        {
          "name": "ktools-kkstrtext-bo(23233)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
        },
        {
          "name": "DSA-1083",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1083"
        },
        {
          "name": "ADV-2005-2605",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2605"
        },
        {
          "name": "20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
        },
        {
          "name": "21161",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/21161"
        },
        {
          "name": "18081",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18081"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3863",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "21684",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21684"
            },
            {
              "name": "17768",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17768"
            },
            {
              "name": "ADV-2006-2062",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2062"
            },
            {
              "name": "20368",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20368"
            },
            {
              "name": "GLSA-200608-27",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200608-27.xml"
            },
            {
              "name": "GLSA-200512-11",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200512-11.xml"
            },
            {
              "name": "DSA-1088",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1088"
            },
            {
              "name": "15600",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15600"
            },
            {
              "name": "20446",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20446"
            },
            {
              "name": "http://www.zone-h.org/en/advisories/read/id=8480/",
              "refsource": "MISC",
              "url": "http://www.zone-h.org/en/advisories/read/id=8480/"
            },
            {
              "name": "20329",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20329"
            },
            {
              "name": "ktools-kkstrtext-bo(23233)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"
            },
            {
              "name": "DSA-1083",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1083"
            },
            {
              "name": "ADV-2005-2605",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2605"
            },
            {
              "name": "20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/417906/100/0/threaded"
            },
            {
              "name": "21161",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/21161"
            },
            {
              "name": "18081",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18081"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3863",
    "datePublished": "2005-11-29T11:00:00",
    "dateReserved": "2005-11-29T00:00:00",
    "dateUpdated": "2024-08-07T23:24:36.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}