CVE

Id
8666  
CVE No.
CVE-2004-0238  
Status
Candidate  
Description
Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.  
Phase
Proposed (20040318)  
Votes
ACCEPT(1) Armstrong | NOOP(3) Cole, Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
54571 8666 CVE-2004-0238 BUGTRAQ:20040202 0verkill - little simple vulnerability.  View
54572 8666 CVE-2004-0238 URL:http://marc.info/?l=bugtraq&m=107577335424509&w=2  View
54573 8666 CVE-2004-0238 FULLDISC:20040202 0verkill - little simple vulnerability.  View
54574 8666 CVE-2004-0238 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html  View
54575 8666 CVE-2004-0238 MISC:http://www.securiteam.com/securitynews/5AP010KC0C.html  View
54576 8666 CVE-2004-0238 BID:9550  View
54577 8666 CVE-2004-0238 URL:http://www.securityfocus.com/bid/9550  View
54578 8666 CVE-2004-0238 XF:overkill-client-multiple-bo(14999)  View
54579 8666 CVE-2004-0238 URL:http://xforce.iss.net/xforce/xfdb/14999  View
54580 8666 CVE-2004-0238 XF:overkill-server-parsecommandline-bo(15000)  View

Related JVN