CVE-2005-3863

Published: Nov 29, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.

Affected (1)

Products: Ktools: Ktools

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ktools Ktools	Up to 0.3

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (34)

http://secunia.com/advisories/17768

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18081

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20329

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20368

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20446

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21684

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200512-11.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200608-27.xml

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1083

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1088

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/21161

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/417906/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15600

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2605

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/2062

Source: cve@mitre.org

Vendor Advisory

http://www.zone-h.org/en/advisories/read/id=8480/

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/23233

Source: cve@mitre.org

http://secunia.com/advisories/17768

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18081

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20329

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/20368

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20446

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21684

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200512-11.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200608-27.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1083

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1088

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/21161

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/417906/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15600

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2605

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/2062

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.zone-h.org/en/advisories/read/id=8480/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/23233

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.