Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in centericq, a text-mode multi-protocol instant messenger client, which may lead local or remote attackers to execute arbitrary code.

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in motor, an integrated development environment for C, C++ and Java, which may lead local attackers to execute arbitrary code.

The remote host is affected by the vulnerability described in GLSA-200608-27 (Motor: Execution of arbitrary code)

    In November 2005, Zone-H Research reported a boundary error in the     ktools library in the VGETSTRING() macro of kkstrtext.h, which may     cause a buffer overflow via an overly long input string.
  Impact :

    A remote attacker could entice a user to use a malicious file or input,     which could lead to the crash of Motor and possibly the execution of     arbitrary code.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-200512-11 (CenterICQ: Multiple vulnerabilities)

    Gentoo developer Wernfried Haas discovered that when the 'Enable     peer-to-peer communications' option is enabled, CenterICQ opens a port     that insufficiently validates whatever is sent to it. Furthermore,     Zone-H Research reported a buffer overflow in the ktools library.
  Impact :

    A remote attacker could cause a crash of CenterICQ by sending     packets to the peer-to-peer communications port, and potentially cause     the execution of arbitrary code by enticing a CenterICQ user to edit     overly long contact details.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
22630	Debian DSA-1088-1 : centericq - buffer overflow	Nessus	Debian Local Security Checks	high
22625	Debian DSA-1083-1 : motor - buffer overflow	Nessus	Debian Local Security Checks	high
22289	GLSA-200608-27 : Motor: Execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
20352	GLSA-200512-11 : CenterICQ: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2005-3863

high

Tenable Plugins

high

high

high

high