CVE-2005-3346

Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as…

published November 20, 2005

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.4th percentile
Published
2005-11-20T21:00Z
EPSS history
Timeline
  • 20 NOV 21:00Z
    Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as…
    cvelistv5