Vulnerability-Lookup

CVE-2005-3269 (GCVE-0-2005-3269)

Vulnerability from cvelistv5 – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01

Summary

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 81/100 over 1011 records in the last 180 days details

References

17 references

URL	Tags
http://securitytracker.com/id?1015538	vdb-entryx_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=112862037500012&w=2	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/15013	vdb-entryx_refsource_BID
http://securitytracker.com/id?1015536	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/18590	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/367	third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/16345	vdb-entryx_refsource_BID
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://securityreason.com/securityalert/51	third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/17092	third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015014	vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2005/1988	vdb-entryx_refsource_VUPEN
http://marc.info/?l=bugtraq&m=113815459026080&w=2	mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1015537	vdb-entryx_refsource_SECTRACK
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://sunsolve.sun.com/search/document.do?assetk…	x_refsource_CONFIRM

Date Public

2005-10-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:01:59.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015538",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015538"
          },
          {
            "name": "20051006 High Risk Vulnerability in Sun Directory Server",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
          },
          {
            "name": "15013",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15013"
          },
          {
            "name": "1015536",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015536"
          },
          {
            "name": "18590",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18590"
          },
          {
            "name": "367",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/367"
          },
          {
            "name": "16345",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16345"
          },
          {
            "name": "102002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
          },
          {
            "name": "51",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/51"
          },
          {
            "name": "redhat-directory-admin-bo(24311)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
          },
          {
            "name": "17092",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17092"
          },
          {
            "name": "1015014",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015014"
          },
          {
            "name": "ADV-2005-1988",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/1988"
          },
          {
            "name": "20060122 High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
          },
          {
            "name": "1015537",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015537"
          },
          {
            "name": "228419",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1015538",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015538"
        },
        {
          "name": "20051006 High Risk Vulnerability in Sun Directory Server",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
        },
        {
          "name": "15013",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15013"
        },
        {
          "name": "1015536",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015536"
        },
        {
          "name": "18590",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18590"
        },
        {
          "name": "367",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/367"
        },
        {
          "name": "16345",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16345"
        },
        {
          "name": "102002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
        },
        {
          "name": "51",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/51"
        },
        {
          "name": "redhat-directory-admin-bo(24311)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
        },
        {
          "name": "17092",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17092"
        },
        {
          "name": "1015014",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015014"
        },
        {
          "name": "ADV-2005-1988",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/1988"
        },
        {
          "name": "20060122 High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
        },
        {
          "name": "1015537",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015537"
        },
        {
          "name": "228419",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2005-3269",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015538",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015538"
            },
            {
              "name": "20051006 High Risk Vulnerability in Sun Directory Server",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
            },
            {
              "name": "15013",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15013"
            },
            {
              "name": "1015536",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015536"
            },
            {
              "name": "18590",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18590"
            },
            {
              "name": "367",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/367"
            },
            {
              "name": "16345",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16345"
            },
            {
              "name": "102002",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
            },
            {
              "name": "51",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/51"
            },
            {
              "name": "redhat-directory-admin-bo(24311)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
            },
            {
              "name": "17092",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17092"
            },
            {
              "name": "1015014",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015014"
            },
            {
              "name": "ADV-2005-1988",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/1988"
            },
            {
              "name": "20060122 High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
            },
            {
              "name": "1015537",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015537"
            },
            {
              "name": "228419",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
            },
            {
              "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1",
              "refsource": "CONFIRM",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-3269",
    "datePublished": "2005-10-20T04:00:00.000Z",
    "dateReserved": "2005-10-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:01:59.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2005-3269",
      "date": "2026-10-14",
      "epss": "0.03148",
      "percentile": "0.87688"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2003q4:*:*:*:*:*:*",
                    "matchCriteriaId": "F8A63139-DAC4-4748-8A20-18FE72C6E93A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2004q2:*:*:*:*:*:*",
                    "matchCriteriaId": "DCF5317C-051B-4906-8438-DEA07EE4D757",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2005q1:*:*:*:*:*:*",
                    "matchCriteriaId": "2FCAD34C-19EB-429A-A41D-0DC1F0999154",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*",
                    "matchCriteriaId": "BE6D70A5-A2AE-4142-86C7-A3D15C155801",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*",
                    "matchCriteriaId": "5F64D5A0-9BED-497F-9C90-B4F404A699A5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*",
                    "matchCriteriaId": "1C4F9948-4A6A-4C68-8CDA-AF34ACA12D5F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_administration_server:5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A099D284-A1C4-474D-ABF9-84DEC377D18B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:4.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9F3F2846-7A02-42A4-AE19-FCE28706FA9A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:4.16:sp1:*:*:*:*:*:*",
                    "matchCriteriaId": "DA43DD25-AACA-4F63-A8E5-0CAA58C27BBA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "80BB5338-F78C-4140-8F60-8BB0F9ADDF7C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.0:sp1:*:*:*:*:*:*",
                    "matchCriteriaId": "F94220C9-8EFC-4491-A530-033EF32AEAEC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.0_sp2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A548BEA7-2592-49F0-BEE8-B077AFF7F8F4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8EBB854A-6951-4CA7-87BB-919B56F88ECB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:*:x86:*:*:*:*:*",
                    "matchCriteriaId": "67D5A7FC-7F6B-461D-AD96-3A42036A91D1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp1:*:*:*:*:*:*",
                    "matchCriteriaId": "3F12275A-86ED-4CB9-9849-BA3D3BF21A0C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp2:*:*:*:*:*:*",
                    "matchCriteriaId": "30214F09-1DD9-4A04-AE86-F5FCC006BD92",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp3:*:*:*:*:*:*",
                    "matchCriteriaId": "8589402C-4E79-4615-A00B-F83B0508F6AF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp3:x86:*:*:*:*:*",
                    "matchCriteriaId": "7ED2C81F-7B2E-4FC5-A521-BE156F00B5CF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp4:*:*:*:*:*:*",
                    "matchCriteriaId": "4E773228-F889-48A4-98DC-44BB5E746CC4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
          }
        ],
        "id": "CVE-2005-3269",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 7.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": true,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2005-10-20T23:02:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17092"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18590"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securityreason.com/securityalert/367"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securityreason.com/securityalert/51"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1015014"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1015536"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1015537"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1015538"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/15013"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/16345"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/1988"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17092"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18590"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/367"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/51"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015014"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015536"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015537"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015538"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/15013"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/16345"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/1988"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

FKIE_CVE-2005-3269

Vulnerability from fkie_nvd - Published: 2005-10-20 23:02 - Updated: 2026-06-16 22:16

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://marc.info/?l=bugtraq&m=112862037500012&w=2
secalert@redhat.com	http://marc.info/?l=bugtraq&m=113815459026080&w=2
secalert@redhat.com	http://secunia.com/advisories/17092	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/18590	Vendor Advisory
secalert@redhat.com	http://securityreason.com/securityalert/367
secalert@redhat.com	http://securityreason.com/securityalert/51
secalert@redhat.com	http://securitytracker.com/id?1015014
secalert@redhat.com	http://securitytracker.com/id?1015536
secalert@redhat.com	http://securitytracker.com/id?1015537
secalert@redhat.com	http://securitytracker.com/id?1015538
secalert@redhat.com	http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1	Patch
secalert@redhat.com	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1
secalert@redhat.com	http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1
secalert@redhat.com	http://www.securityfocus.com/bid/15013
secalert@redhat.com	http://www.securityfocus.com/bid/16345
secalert@redhat.com	http://www.vupen.com/english/advisories/2005/1988	Vendor Advisory
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/24311
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=112862037500012&w=2
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=113815459026080&w=2
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17092	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18590	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securityreason.com/securityalert/367
af854a3a-2127-422b-91ae-364da2661108	http://securityreason.com/securityalert/51
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015014
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015536
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015537
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015538
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1	Patch
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/15013
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/16345
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2005/1988	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/24311

Impacted products

Vendor	Product	Version
sun	java_system_directory_proxy_server	5.2
sun	java_system_directory_proxy_server	5.2
sun	java_system_directory_proxy_server	5.2
sun	java_system_directory_server	5.2
sun	java_system_directory_server	5.2
sun	java_system_directory_server	5.2
sun	java_system_directory_server	5.2
sun	one_administration_server	5.2
sun	one_directory_server	4.16
sun	one_directory_server	4.16
sun	one_directory_server	5.0
sun	one_directory_server	5.0
sun	one_directory_server	5.0_sp2
sun	one_directory_server	5.1
sun	one_directory_server	5.1
sun	one_directory_server	5.1
sun	one_directory_server	5.1
sun	one_directory_server	5.1
sun	one_directory_server	5.1
sun	one_directory_server	5.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2003q4:*:*:*:*:*:*",
              "matchCriteriaId": "F8A63139-DAC4-4748-8A20-18FE72C6E93A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2004q2:*:*:*:*:*:*",
              "matchCriteriaId": "DCF5317C-051B-4906-8438-DEA07EE4D757",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2005q1:*:*:*:*:*:*",
              "matchCriteriaId": "2FCAD34C-19EB-429A-A41D-0DC1F0999154",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*",
              "matchCriteriaId": "BE6D70A5-A2AE-4142-86C7-A3D15C155801",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*",
              "matchCriteriaId": "5F64D5A0-9BED-497F-9C90-B4F404A699A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*",
              "matchCriteriaId": "1C4F9948-4A6A-4C68-8CDA-AF34ACA12D5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_administration_server:5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A099D284-A1C4-474D-ABF9-84DEC377D18B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:4.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F3F2846-7A02-42A4-AE19-FCE28706FA9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:4.16:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "DA43DD25-AACA-4F63-A8E5-0CAA58C27BBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "80BB5338-F78C-4140-8F60-8BB0F9ADDF7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.0:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "F94220C9-8EFC-4491-A530-033EF32AEAEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.0_sp2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A548BEA7-2592-49F0-BEE8-B077AFF7F8F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EBB854A-6951-4CA7-87BB-919B56F88ECB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:*:x86:*:*:*:*:*",
              "matchCriteriaId": "67D5A7FC-7F6B-461D-AD96-3A42036A91D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "3F12275A-86ED-4CB9-9849-BA3D3BF21A0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "30214F09-1DD9-4A04-AE86-F5FCC006BD92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "8589402C-4E79-4615-A00B-F83B0508F6AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp3:x86:*:*:*:*:*",
              "matchCriteriaId": "7ED2C81F-7B2E-4FC5-A521-BE156F00B5CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sun:one_directory_server:5.1:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "4E773228-F889-48A4-98DC-44BB5E746CC4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
    }
  ],
  "id": "CVE-2005-3269",
  "lastModified": "2026-06-16T22:16:36.833",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-10-20T23:02:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17092"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18590"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securityreason.com/securityalert/367"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securityreason.com/securityalert/51"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1015014"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1015536"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1015537"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1015538"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/15013"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/16345"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2005/1988"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17092"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18590"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/367"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/51"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015014"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015537"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015538"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/15013"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/16345"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2005/1988"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-WCRV-7CCM-JH9R

Vulnerability from github – Published: 2022-05-01 02:16 – Updated: 2022-05-01 02:16

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2005-3269"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-10-20T23:02:00Z",
    "severity": "HIGH"
  },
  "details": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.",
  "id": "GHSA-wcrv-7ccm-jh9r",
  "modified": "2022-05-01T02:16:18Z",
  "published": "2022-05-01T02:16:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3269"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17092"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18590"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/367"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/51"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015014"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015536"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015537"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015538"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/15013"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/16345"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2005/1988"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2005-3269

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2005-3269

Aliases

CVE-2005-3269

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2005-3269",
    "description": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.",
    "id": "GSD-2005-3269"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2005-3269"
      ],
      "details": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.",
      "id": "GSD-2005-3269",
      "modified": "2023-12-13T01:20:12.240033Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2005-3269",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1015538",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015538"
          },
          {
            "name": "20051006 High Risk Vulnerability in Sun Directory Server",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
          },
          {
            "name": "15013",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/15013"
          },
          {
            "name": "1015536",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015536"
          },
          {
            "name": "18590",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18590"
          },
          {
            "name": "367",
            "refsource": "SREASON",
            "url": "http://securityreason.com/securityalert/367"
          },
          {
            "name": "16345",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/16345"
          },
          {
            "name": "102002",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
          },
          {
            "name": "51",
            "refsource": "SREASON",
            "url": "http://securityreason.com/securityalert/51"
          },
          {
            "name": "redhat-directory-admin-bo(24311)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
          },
          {
            "name": "17092",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17092"
          },
          {
            "name": "1015014",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015014"
          },
          {
            "name": "ADV-2005-1988",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2005/1988"
          },
          {
            "name": "20060122 High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
          },
          {
            "name": "1015537",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015537"
          },
          {
            "name": "228419",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
          },
          {
            "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1",
            "refsource": "CONFIRM",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:*:x86:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.0:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.0_sp2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2003q4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_administration_server:5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:4.16:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2004q2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:java_system_directory_proxy_server:5.2:2005q1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:4.16:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:sp3:x86:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sun:one_directory_server:5.1:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2005-3269"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1"
            },
            {
              "name": "102002",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1"
            },
            {
              "name": "1015014",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015014"
            },
            {
              "name": "1015537",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015537"
            },
            {
              "name": "1015536",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015536"
            },
            {
              "name": "18590",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/18590"
            },
            {
              "name": "17092",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17092"
            },
            {
              "name": "15013",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/15013"
            },
            {
              "name": "16345",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/16345"
            },
            {
              "name": "1015538",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015538"
            },
            {
              "name": "367",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/367"
            },
            {
              "name": "51",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/51"
            },
            {
              "name": "228419",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1"
            },
            {
              "name": "ADV-2005-1988",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2005/1988"
            },
            {
              "name": "20060122 High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=113815459026080\u0026w=2"
            },
            {
              "name": "20051006 High Risk Vulnerability in Sun Directory Server",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=112862037500012\u0026w=2"
            },
            {
              "name": "redhat-directory-admin-bo(24311)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24311"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": true,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-11T01:33Z",
      "publishedDate": "2005-10-20T23:02Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2005-3269 (GCVE-0-2005-3269)

FKIE_CVE-2005-3269

GHSA-WCRV-7CCM-JH9R

GSD-2005-3269

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour