openmotif libUil buffer overflows

🗓️ 04 Apr 2006 09:04:00Reported by RedHatType

Multiple buffer overflows in libUil.so of OpenMotif 2.2.3 allow remote code execution via diag_issue_diagnostic and open_source_file.

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 3 / 4 : openmotif (CESA-2006:0272)	3 Jul 200600:00	–	nessus
Tenable Nessus	Fedora Core 4 : openmotif-2.2.3-10.FC4.2 (2006-854)	17 Jan 200700:00	–	nessus
Tenable Nessus	GLSA-200512-16 : OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library	30 Dec 200500:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.06 : motif Vulnerability (NS-SA-2025-0226)	30 Sep 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i386	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.i386.rpm
Red Hat Enterprise Linux	4	ia64	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.ia64.rpm
Red Hat Enterprise Linux	4	ppc	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.ppc.rpm
Red Hat Enterprise Linux	4	ppc64	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.ppc64.rpm
Red Hat Enterprise Linux	4	s390	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.s390.rpm
Red Hat Enterprise Linux	4	s390x	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	openmotif	0:2.2.3-10.RHEL4.1	openmotif-0:2.2.3-10.RHEL4.1.x86_64.rpm
Red Hat Enterprise Linux	3	i386	openmotif	0:2.2.3-5.RHEL3.3	openmotif-0:2.2.3-5.RHEL3.3.i386.rpm
Red Hat Enterprise Linux	3	ia64	openmotif	0:2.2.3-5.RHEL3.3	openmotif-0:2.2.3-5.RHEL3.3.ia64.rpm
Red Hat Enterprise Linux	3	ppc	openmotif	0:2.2.3-5.RHEL3.3	openmotif-0:2.2.3-5.RHEL3.3.ppc.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2005-3964
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2005-3964
cve	www.cve.org/CVERecord

25 Jun 2026 10:33Current

6.3Medium risk

Vulners AI Score6.3

CVSS 27.5

EPSS0.04591