PT-2005-1079 · Libxpm+3 · Libxpm+3

Chris Gilbert · Published 2005-03-02 · Updated 2018-10-03 · CVE-2005-0605

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibXPM (affected versions not specified) lesstif versions 0.93.15 lesstif-devel versions 0.93.15

Description The issue allows attackers to execute arbitrary code via a buffer overflow caused by a negative bitmap unit value in scan.c for LibXPM. For lesstif and lesstif-devel packages in Red Hat Enterprise Linux, exploitation can lead to disruption of confidentiality, integrity, and availability of protected information. The vulnerability can be exploited remotely.

Recommendations For LibXPM, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For lesstif version 0.93.15, update to a version that fixes the vulnerability. For lesstif-devel version 0.93.15, update to a version that fixes the vulnerability.

Related Identifiers

BDU:2015-07326

BDU:2015-07327

CVE-2005-0605

DSA-723-1

RHSA-2005:198

RHSA-2005:331

RHSA-2005:412

RHSA-2005_198

RHSA-2005_331

RHSA-2005_412

RHSA-2008:0261

RHSA-2008:0524

Affected Products

Libxpm

Red Hat

Lesstif

Lesstif-Dev

References · 35

• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07326 · Security Note
• http://redhat.com/support/errata/RHSA-2005-473.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-412.html · Vendor Advisory
• http://securityfocus.com/bid/12714 · Vendor Advisory
• http://bugs.gentoo.org/show_bug.cgi?id=83598 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07327 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-0605 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-331.html · Vendor Advisory
• https://usn.ubuntu.com/97-1 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200503-15.xml · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html · Vendor Advisory
• https://usn.ubuntu.com/92-1 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt · Vendor Advisory