PT-2005-4607 · Ktools · Ktools Library

Kevin Fernandez + 1 · Publicado 2005-11-29 · Atualizado 2018-10-19 · CVE-2005-3863

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ktools library version 0.3 and earlier

Description A stack-based buffer overflow issue exists in the kkstrtext.h file of the ktools library, which is used in various products. This issue allows local users or remote attackers to execute arbitrary code by providing a long parameter to the VGETSTRING macro.

Recommendations For ktools library version 0.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2005-3863

DSA-1083-1

DSA-1088-1

DTSA-23-1

Produtos afetados

Ktools Library

Referências · 18

• http://zone-h.org/en/advisories/read/id=8480 · Aviso do Fabricante
• http://secunia.com/advisories/17768 · Aviso do Fabricante
• http://securityfocus.com/archive/1/417906/100/0/threaded · Nota
• http://debian.org/security/2006/dsa-1088 · Aviso do Fabricante
• http://secunia.com/advisories/20446 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200608-27.xml · Aviso do Fabricante
• http://secunia.com/advisories/21684 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1083 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2605 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3863 · Nota de Segurança
• http://secunia.com/advisories/20329 · Aviso do Fabricante
• http://securityfocus.com/bid/15600 · Nota
• http://secunia.com/advisories/18081 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2062 · Aviso do Fabricante
• http://secunia.com/advisories/20368 · Aviso do Fabricante