CVE-2005-1019
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain...
CVE-2005-1019 is a high vulnerability (CVSS 7.2) in Aeon, published April 9, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 1.11%EPSS, 66th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Aeon 0.2a - Local Linux (1) | 2005-04-05 |
| Exploit-DB | Aeon 0.2a - Local Linux (2) | 2005-04-05 |
What each source reports
NVD Score used
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
- Record
CVE-2005-1019- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
- Record
CVE-2005-1019- Updated
- 2026-11-02
EUVDEUVD-2005-1022No score
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
- Record
EUVD-2005-1022- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8v3-g88r-7jc4No score
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain...
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
- Record
GHSA-j8v3-g88r-7jc4- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.