CVE

Id
14552  
CVE No.
CVE-2005-3346  
Status
Candidate  
Description
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.  
Phase
Assigned (20051027)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
110182 14552 CVE-2005-3346 MISC:http://pulltheplug.org/users/core/files/x_osh3.sh  View
110183 14552 CVE-2005-3346 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338312  View
110184 14552 CVE-2005-3346 DEBIAN:DSA-918  View
110185 14552 CVE-2005-3346 URL:http://www.debian.org/security/2005/dsa-918  View
110186 14552 CVE-2005-3346 BID:15370  View
110187 14552 CVE-2005-3346 URL:http://www.securityfocus.com/bid/15370  View
110188 14552 CVE-2005-3346 VUPEN:ADV-2005-2378  View
110189 14552 CVE-2005-3346 URL:http://www.vupen.com/english/advisories/2005/2378  View
110190 14552 CVE-2005-3346 OSVDB:20720  View
110191 14552 CVE-2005-3346 URL:http://www.osvdb.org/20720  View
110192 14552 CVE-2005-3346 SECUNIA:17527  View
110193 14552 CVE-2005-3346 URL:http://secunia.com/advisories/17527  View
110194 14552 CVE-2005-3346 SECUNIA:17967  View
110195 14552 CVE-2005-3346 URL:http://secunia.com/advisories/17967  View
110196 14552 CVE-2005-3346 XF:osh-main-execute-code(23091)  View

Related JVN