CVE-2005-0160

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.htmlVendor Advisory
http://secunia.com/advisories/14359Vendor Advisory
http://www.kb.cert.org/vuls/id/215006US Government Resource
http://www.novell.com/linux/security/advisories/2005_16_sr.html
http://www.securityfocus.com/bid/12630
http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.htmlVendor Advisory
http://secunia.com/advisories/14359Vendor Advisory
http://www.kb.cert.org/vuls/id/215006US Government Resource
http://www.novell.com/linux/security/advisories/2005_16_sr.html
http://www.securityfocus.com/bid/12630

Timeline

Published: Feb 22, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01612.1Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ..CVE-2005-01627.2Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x CVE-2005-01737.5squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a userna CVE-2005-01745.0Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP s CVE-2005-01755.0Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.CVE-2005-01765.0The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memor CVE-2005-01777.8nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a b CVE-2005-01786.2Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access po CVE-2005-01792.1Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via CVE-2005-01803.6Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel CVE-2005-01825.0The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers CVE-2005-01837.2ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters i