Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-0011

Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.

Published

2005-05-02T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	kde	kde	3.3	Yes
Operating System	kde	kde	3.3.1	Yes
Operating System	kde	kde	3.3.2	Yes

References

http://secunia.com/advisories/14306 Patch ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml Vendor Advisory ([email protected])
http://www.kde.org/info/security/advisory-20050215-1.txt Patch, Vendor Advisory ([email protected])
http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html Vendor Advisory ([email protected])
http://secunia.com/advisories/14306 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kde.org/info/security/advisory-20050215-1.txt Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)