Description
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
References (17)
Core 17
Core References
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200608-27.xml
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200512-11.xml
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21684
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17768
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2062
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20368
Patch, Vendor Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1088
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15600
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20446
Vendor Advisory x_refsource_misc
http://www.zone-h.org/en/advisories/read/id=8480/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20329
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23233
Patch, Vendor Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1083
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2605
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/417906/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21161
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18081
Scores
EPSS
0.0516
EPSS Percentile
91.5%
Details
CWE
CWE-119
Status
published
Products (1)
ktools/ktools
< 0.3
Published
Nov 29, 2005
Tracked Since
Feb 18, 2026