Published: 29/11/2005 Updated: 19/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and previous versions, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote malicious users to execute arbitrary code via a long parameter to the VGETSTRING macro.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ktools ktools

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in centericq, a text-mode multi-protocol instant messenger client, which may lead local or remote attackers to execute arbitrary code For the old stable distribution (woody) this problem has been fixed in version 451-11woody2 For the stable distrib ...

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in motor, an integrated development environment for C, C++ and Java, which may lead local attackers to execute arbitrary code For the old stable distribution (woody) this problem has been fixed in version 322-2woody1 For the stable distribution (sar ...

CWE-119 http://www.zone-h.org/en/advisories/read/id=8480/http://www.securityfocus.com/bid/15600 http://secunia.com/advisories/17768 http://www.osvdb.org/21161 http://security.gentoo.org/glsa/glsa-200512-11.xml http://secunia.com/advisories/18081 http://www.debian.org/security/2006/dsa-1083 http://secunia.com/advisories/20329 http://secunia.com/advisories/20368 http://www.debian.org/security/2006/dsa-1088 http://secunia.com/advisories/20446 http://security.gentoo.org/glsa/glsa-200608-27.xml http://secunia.com/advisories/21684 http://www.vupen.com/english/advisories/2006/2062 http://www.vupen.com/english/advisories/2005/2605 https://exchange.xforce.ibmcloud.com/vulnerabilities/23233 http://www.securityfocus.com/archive/1/417906/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1088

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-3863

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect