FreeBSD : xshisen -- local buffer overflows (56971fa6-641c-11d9-a097-000854d03344)

Steve Kemp has found buffer overflows in the handling of the command line flag -KCONV and the XSHISENLIB environment variable. Ulf Harnhammer has detected an unbounded copy from the GECOS field to a char array. All overflows can be exploited to gain group games privileges. %NASLMINLEVEL 70300 C...

CVE-2005-0117

XShisen (before 1.36) is vulnerable to a local buffer overflow via an oversized GECOS field, allowing local code execution. This is supported across multiple sources (NVD, CVE record, Debian/Ubuntu OSV entries, and OpenVAS/Nessus advisories) describing a buffer overflow in handling GECOS input. T...

CVE-2005-0117

Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field...