Unscored severity · published Oct 20, 2005
CVE-2005-3269
Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Directory Proxy Server · Sun
5.2; 5.2; 5.2 · source: NVD
JS
Java System Directory Server · Sun
5.2; 5.2; 5.2; 5.2 · source: NVD
OA
One Administration Server · Sun
5.2 · source: NVD
OD
One Directory Server · Sun
4.16; 4.16; 5.0; 5.0; 5.0_sp2; 5.1; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3269
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3269
marc.info
http://marc.info/?l=bugtraq&m=112862037500012&w=2
marc.info
http://marc.info/?l=bugtraq&m=113815459026080&w=2
Vendor Advisory
http://secunia.com/advisories/17092
Vendor Advisory
http://secunia.com/advisories/18590
securityreason.com
http://securityreason.com/securityalert/367
securityreason.com
http://securityreason.com/securityalert/51