CVE ID:	CVE-2005-3863
Description:	Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
Test IDs:	1.3.6.1.4.1.25623.1.0.56853   1.3.6.1.4.1.25623.1.0.57877   1.3.6.1.4.1.25623.1.0.56858
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3863 BugTraq ID: 15600 http://www.securityfocus.com/bid/15600 Bugtraq: 20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/417906/100/0/threaded Debian Security Information: DSA-1083 (Google Search) http://www.debian.org/security/2006/dsa-1083 Debian Security Information: DSA-1088 (Google Search) http://www.debian.org/security/2006/dsa-1088 http://security.gentoo.org/glsa/glsa-200512-11.xml http://security.gentoo.org/glsa/glsa-200608-27.xml http://www.zone-h.org/en/advisories/read/id=8480/ http://www.osvdb.org/21161 http://secunia.com/advisories/17768 http://secunia.com/advisories/18081 http://secunia.com/advisories/20329 http://secunia.com/advisories/20368 http://secunia.com/advisories/20446 http://secunia.com/advisories/21684 http://www.vupen.com/english/advisories/2005/2605 http://www.vupen.com/english/advisories/2006/2062 XForce ISS Database: ktools-kkstrtext-bo(23233) https://exchange.xforce.ibmcloud.com/vulnerabilities/23233