CVE-2005-0011

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14306Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-23.xmlVendor Advisory
http://www.kde.org/info/security/advisory-20050215-1.txtPatch, Vendor Advisory
http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.htmlVendor Advisory
http://secunia.com/advisories/14306Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-23.xmlVendor Advisory
http://www.kde.org/info/security/advisory-20050215-1.txtPatch, Vendor Advisory
http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.htmlVendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-00127.5Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via f CVE-2005-00137.2nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows l CVE-2005-00147.5Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.CVE-2005-00157.5diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2005-00167.2Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code.CVE-2005-00172.1The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.CVE-2005-00182.1The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.CVE-2005-00194.6Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.CVE-2005-00207.2Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-00217.2Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 compone CVE-2005-00224.6Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_sp CVE-2005-00232.1gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NO