← Back

Osh

osh

Vendor: Osh • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-3533
1Osh
1Osh
Apr 16, 2026
Dec 11, 2005
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.
CVE-2005-3346
1Osh
1Osh
Apr 16, 2026
Nov 20, 2005
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg",...Show more
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.Show less