CVE-2005-0117

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 11, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-01182.1helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to CVE-2005-01192.1helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.CVE-2005-01202.1helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.CVE-2005-01214.6Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argumeCVE-2005-01242.1The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause CVE-2005-01257.2The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files viaCVE-2005-01267.5ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.CVE-2005-01275.0Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardwCVE-2005-01297.5The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" varCVE-2005-01307.5Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel namesCVE-2005-01315.0The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided CVE-2005-01335.0ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
CVE-2005-0117: Medium severity, CVSS 4.6 | Vulnix