PT-2005-1014 · Debian · Osh

Solar Eclipse · Published 2005-11-20 · Updated 2011-03-08 · CVE-2005-3533

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OSH versions prior to 1.7-15

Description The issue concerns multiple vulnerabilities in the OSH package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited by a local attacker, potentially leading to breaches of confidentiality, integrity, and availability of protected information. A specific vulnerability involves a buffer overflow in OSH, which can be triggered by a local user providing a long current working directory and filename, allowing the execution of arbitrary code.

Recommendations For OSH versions prior to 1.7-15, update to version 1.7-15 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of exploitation. Avoid using excessively long filenames and directory paths in the affected OSH versions until the issue is resolved.

Exploit

Fix

Related Identifiers

BDU:2015-02398

CVE-2005-3533

DSA-918-1

Affected Products

Osh

References · 12

• 🔥 https://exploit-db.com/exploits/788 · Exploit
• 🔥 https://exploit-db.com/exploits/1154 · Exploit
• http://debian.org/security/2005/dsa-918 · Vendor Advisory
• http://secunia.com/advisories/17967 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3346 · Security Note
• https://bdu.fstec.ru/vul/2015-02398 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3533 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-3533 · Security Note
• http://debian.org/security/dsa-918 · Note
• http://vupen.com/english/advisories/2005/2812 · Note
• http://osvdb.org/21576 · Note
• http://securityfocus.com/bid/12455 · Note