{"api_version":"1","generated_at":"2026-07-23T05:22:23+00:00","cve":"CVE-2005-3863","urls":{"html":"https://cve.report/CVE-2005-3863","api":"https://cve.report/api/cve/CVE-2005-3863.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3863","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3863"},"summary":{"title":"CVE-2005-3863","description":"Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-11-29 11:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.debian.org/security/2006/dsa-1083","name":"http://www.debian.org/security/2006/dsa-1083","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Debian -- Security Information -- DSA-1083-1 motor","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/417906/100/0/threaded","name":"http://www.securityfocus.com/archive/1/417906/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/20368","name":"http://secunia.com/advisories/20368","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Debian update for motor - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200608-27.xml","name":"http://security.gentoo.org/glsa/glsa-200608-27.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  Motor: Execution of arbitrary code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18081","name":"http://secunia.com/advisories/18081","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Gentoo update for centericq - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200512-11.xml","name":"http://security.gentoo.org/glsa/glsa-200512-11.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  CenterICQ: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/15600","name":"http://www.securityfocus.com/bid/15600","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"KTools Remote Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/17768","name":"http://secunia.com/advisories/17768","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"ktools VGETSTRING Buffer Overflow Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/21161","name":"http://www.osvdb.org/21161","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/21684","name":"http://secunia.com/advisories/21684","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Gentoo update for motor - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zone-h.org/en/advisories/read/id=8480/","name":"http://www.zone-h.org/en/advisories/read/id=8480/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Zone-H.org * Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/20329","name":"http://secunia.com/advisories/20329","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Motor ktools VGETSTRING Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/20446","name":"http://secunia.com/advisories/20446","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Debian update for centericq - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1088","name":"http://www.debian.org/security/2006/dsa-1088","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Debian -- Security Information -- DSA-1088-1 centericq","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23233","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23233","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2005/2605","name":"http://www.vupen.com/english/advisories/2005/2605","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2062","name":"http://www.vupen.com/english/advisories/2006/2062","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3863","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3863","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3863","vulnerable":"1","versionEndIncluding":"0.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ktools","cpe5":"ktools","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:24:36.562Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"21684","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/21684"},{"name":"17768","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17768"},{"name":"ADV-2006-2062","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/2062"},{"name":"20368","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/20368"},{"name":"GLSA-200608-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200608-27.xml"},{"name":"GLSA-200512-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200512-11.xml"},{"name":"DSA-1088","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2006/dsa-1088"},{"name":"15600","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15600"},{"name":"20446","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/20446"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zone-h.org/en/advisories/read/id=8480/"},{"name":"20329","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/20329"},{"name":"ktools-kkstrtext-bo(23233)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"},{"name":"DSA-1083","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2006/dsa-1083"},{"name":"ADV-2005-2605","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/2605"},{"name":"20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/417906/100/0/threaded"},{"name":"21161","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/21161"},{"name":"18081","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18081"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-11-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"21684","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/21684"},{"name":"17768","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17768"},{"name":"ADV-2006-2062","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/2062"},{"name":"20368","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/20368"},{"name":"GLSA-200608-27","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-200608-27.xml"},{"name":"GLSA-200512-11","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-200512-11.xml"},{"name":"DSA-1088","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2006/dsa-1088"},{"name":"15600","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15600"},{"name":"20446","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/20446"},{"tags":["x_refsource_MISC"],"url":"http://www.zone-h.org/en/advisories/read/id=8480/"},{"name":"20329","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/20329"},{"name":"ktools-kkstrtext-bo(23233)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"},{"name":"DSA-1083","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2006/dsa-1083"},{"name":"ADV-2005-2605","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/2605"},{"name":"20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/417906/100/0/threaded"},{"name":"21161","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/21161"},{"name":"18081","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18081"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3863","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"21684","refsource":"SECUNIA","url":"http://secunia.com/advisories/21684"},{"name":"17768","refsource":"SECUNIA","url":"http://secunia.com/advisories/17768"},{"name":"ADV-2006-2062","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/2062"},{"name":"20368","refsource":"SECUNIA","url":"http://secunia.com/advisories/20368"},{"name":"GLSA-200608-27","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200608-27.xml"},{"name":"GLSA-200512-11","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200512-11.xml"},{"name":"DSA-1088","refsource":"DEBIAN","url":"http://www.debian.org/security/2006/dsa-1088"},{"name":"15600","refsource":"BID","url":"http://www.securityfocus.com/bid/15600"},{"name":"20446","refsource":"SECUNIA","url":"http://secunia.com/advisories/20446"},{"name":"http://www.zone-h.org/en/advisories/read/id=8480/","refsource":"MISC","url":"http://www.zone-h.org/en/advisories/read/id=8480/"},{"name":"20329","refsource":"SECUNIA","url":"http://secunia.com/advisories/20329"},{"name":"ktools-kkstrtext-bo(23233)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23233"},{"name":"DSA-1083","refsource":"DEBIAN","url":"http://www.debian.org/security/2006/dsa-1083"},{"name":"ADV-2005-2605","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/2605"},{"name":"20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/417906/100/0/threaded"},{"name":"21161","refsource":"OSVDB","url":"http://www.osvdb.org/21161"},{"name":"18081","refsource":"SECUNIA","url":"http://secunia.com/advisories/18081"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3863","datePublished":"2005-11-29T11:00:00.000Z","dateReserved":"2005-11-29T00:00:00.000Z","dateUpdated":"2024-08-07T23:24:36.562Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-11-29 11:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:ktools:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"6CC84E5D-A721-4186-8717-206A5A4963DF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3863","Ordinal":"1","Title":"CVE-2005-3863","CVE":"CVE-2005-3863","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3863","Ordinal":"1","NoteData":"Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.","Type":"Description","Title":"CVE-2005-3863"},{"CveYear":"2005","CveId":"3863","Ordinal":"2","NoteData":"2005-11-29","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"3863","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}