CVE-2005-4076 - Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary cod

CVE-2005-4076

Summary

Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable.

References

Vulnerable Configurations

cpe:2.3:a:appfluent_technology:database_ids:2.0:*:*:*:*:*:*:*
cpe:2.3:a:appfluent_technology:database_ids:2.0:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	15755
fulldisc	20051207 Appfluent Batabase IDS Local Root
misc	http://mantis.pulltheplug.org/display.php?offset=8 http://open-security.org/advisories/14
secunia	17947

Last major update

05-09-2008 - 20:56

Published

08-12-2005 - 01:03

Last modified

05-09-2008 - 20:56