high7.2Public exploit code
CVE-2005-3533
Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Operator Shell (osh) 1.7-13 - Local Privilege Escalation2005-08-16 · local · linux · Verified
- Operator Shell (osh) 1.7-12 - Local Privilege Escalation2005-02-05 · local · linux · Verified
Impact
Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osh | Osh | through 1.7.14 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17967
- http://www.debian.org/security/2005/dsa-918
- http://www.osvdb.org/21576
- http://www.securityfocus.com/bid/12455
- http://www.vupen.com/english/advisories/2005/2812
- http://secunia.com/advisories/17967
- http://www.debian.org/security/2005/dsa-918
- http://www.osvdb.org/21576
- http://www.securityfocus.com/bid/12455
- http://www.vupen.com/english/advisories/2005/2812