CVE-2005-3992
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote...
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
- Record
CVE-2005-3992- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
- Record
CVE-2005-3992- Updated
- 2026-11-02
EUVDEUVD-2005-3987 No score
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
- Record
EUVD-2005-3987- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vcfg-5rc5-3vvf No score
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote...
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
- Record
GHSA-vcfg-5rc5-3vvf- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | WinEggDropShell 1.7 - Multiple Remote Stack Overflows (PoC) | 2005-12-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3992 is a high vulnerability (CVSS 7.5) in Wineggdropshell, published December 4, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.95%, the 92nd percentile. No source names a fixed version.