Lucene search

K
cve[email protected]CVE-2005-1019
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1019

2005-05-0204:00:00
web.nvd.nist.gov
24
buffer overflow
getconfig function
aeon 0.2a
local users
privileges
home environment variable

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.

Affected configurations

NVD
Node
aeonaeonMatch0.1.8
OR
aeonaeonMatch0.1.9
OR
aeonaeonMatch0.2
OR
aeonaeonMatch0.2a

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Related for CVE-2005-1019