CVE-2005-0385

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14582Exploit, Vendor Advisory
http://www.debian.org/security/2005/dsa-693Exploit, Vendor Advisory
http://www.digitalmunition.com/DMA%5B2005-0310a%5D.txt
http://www.securityfocus.com/archive/1/393195/2005-03-13/2005-03-19/0
http://www.securityfocus.com/bid/12797Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19680
http://secunia.com/advisories/14582Exploit, Vendor Advisory
http://www.debian.org/security/2005/dsa-693Exploit, Vendor Advisory
http://www.digitalmunition.com/DMA%5B2005-0310a%5D.txt
http://www.securityfocus.com/archive/1/393195/2005-03-13/2005-03-19/0
http://www.securityfocus.com/bid/12797Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/19680

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-03864.3Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web CVE-2005-03872.1remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on CVE-2005-03887.5Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to CVE-2005-03907.5Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code.CVE-2005-03915.0geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary CVE-2005-03927.2ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.CVE-2005-03937.2The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack CVE-2005-03962.1Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver CVE-2005-03977.5Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a den CVE-2005-03985.0The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.CVE-2005-03995.1Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other ap CVE-2005-04002.1The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new di