CVE-2005-4581

CVE-2005-4581: A buffer overflow in the Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. The advisory notes the program is not setuid and is not typically invoked by remote programs, so there may not be a typical privilege‑escalation attack ...

CVE-2005-4582

CVE-2005-4582 affects Electric Sheep 2.6.3, where the client does not require authentication or integrity checks from the server. This can allow remote attackers to download and display arbitrary MPEG movie files via DNS spoofing, a URL on the command line, or a URL in the configuration file. The...