Unrated severityNVD Advisory· Published Nov 20, 2005· Updated Jun 16, 2026
CVE-2005-3346
CVE-2005-3346
Description
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
9- secunia.com/advisories/17527nvdVendor Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvd
- pulltheplug.org/users/core/files/x_osh3.shnvd
- secunia.com/advisories/17967nvd
- www.debian.org/security/2005/dsa-918nvd
- www.osvdb.org/20720nvd
- www.securityfocus.com/bid/15370nvd
- www.vupen.com/english/advisories/2005/2378nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/23091nvd
News mentions
0No linked articles in our index yet.