Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-2491
HistoryAug 23, 2005 - 12:00 a.m.

CVE-2005-2491

2005-08-2300:00:00
ubuntu.com
ubuntu.com
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%

Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions
(PCRE) before 6.2, as used in multiple products such as Python, Ethereal,
and PHP, allows attackers to execute arbitrary code via quantifier values
in regular expressions, which leads to a heap-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpcre3< 6.4-1.1ubuntu4UNKNOWN
ubuntu6.10noarchpcre3< 6.4-1.1ubuntu4UNKNOWN
ubuntu7.04noarchpcre3< 6.4-1.1ubuntu4UNKNOWN
ubuntu6.06noarchpython2.2< 2.2.3dfsg-4UNKNOWN
ubuntu6.06noarchpython2.3< 2.3.5-9ubuntu1.2UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.6%