{"schemaVersion":3,"id":"CVE-2005-3269","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.","dates":{"published":"2005-10-20T04:00:00.000Z","modified":"2024-08-07T23:01:59.084Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03148,"percentile":0.87752,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03148},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03148,"percentile":0.87752}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03148,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03148,"percentile":0.87752}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"sun","product":"java_system_directory_proxy_server","name":"java system directory proxy server","label":"java_system_directory_proxy_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.2:2003q4","noFixRecorded":false,"fixedIn":null},{"text":"5.2:2004q2","noFixRecorded":false,"fixedIn":null},{"text":"5.2:2005q1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.2:2003q4 | 5.2:2004q2 | 5.2:2005q1","eol":null,"hubHref":"/vendor/sun/java_system_directory_proxy_server"},{"vendor":"sun","product":"java_system_directory_server","name":"java system directory server","label":"java_system_directory_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.2","noFixRecorded":false,"fixedIn":null},{"text":"5.2:2003q4","noFixRecorded":false,"fixedIn":null},{"text":"5.2:2004q2","noFixRecorded":false,"fixedIn":null},{"text":"5.2:2005q1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.2 | 5.2:2003q4 | 5.2:2004q2 | 5.2:2005q1","eol":null,"hubHref":"/vendor/sun/java_system_directory_server"},{"vendor":"sun","product":"one_administration_server","name":"one administration server","label":"one_administration_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.2","eol":null,"hubHref":"/vendor/sun/one_administration_server"},{"vendor":"sun","product":"one_directory_server","name":"one directory server","label":"one_directory_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.16","noFixRecorded":false,"fixedIn":null},{"text":"4.16:sp1","noFixRecorded":false,"fixedIn":null},{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"5.0:sp1","noFixRecorded":false,"fixedIn":null},{"text":"5.0_sp2","noFixRecorded":false,"fixedIn":null},{"text":"5.1","noFixRecorded":false,"fixedIn":null},{"text":"5.1:sp1","noFixRecorded":false,"fixedIn":null},{"text":"5.1:sp2","noFixRecorded":false,"fixedIn":null},{"text":"5.1:sp3","noFixRecorded":false,"fixedIn":null},{"text":"5.1:sp4","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.16 | 4.16:sp1 | 5.0 | 5.0:sp1 | 5.0_sp2 | 5.1 | 5.1:sp1 | 5.1:sp2 | 5.1:sp3 | 5.1:sp4","eol":null,"hubHref":"/vendor/sun/one_directory_server"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://securitytracker.com/id?1015538","label":"securitytracker.com/id?1015538","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://marc.info/?l=bugtraq&m=112862037500012&w=2","label":"marc.info?l=bugtraq&m=112862037500012&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/15013","label":"www.securityfocus.com/bid/15013","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://securitytracker.com/id?1015536","label":"securitytracker.com/id?1015536","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/18590","label":"secunia.com/advisories/18590","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/367","label":"securityreason.com/securityalert/367","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.securityfocus.com/bid/16345","label":"www.securityfocus.com/bid/16345","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://securityreason.com/securityalert/51","label":"securityreason.com/securityalert/51","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24311","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24311","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/advisories/17092","label":"secunia.com/advisories/17092","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1015014","label":"securitytracker.com/id?1015014","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.vupen.com/english/advisories/2005/1988","label":"www.vupen.com/english/advisories/2005/1988","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=113815459026080&w=2","label":"marc.info?l=bugtraq&m=113815459026080&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://securitytracker.com/id?1015537","label":"securitytracker.com/id?1015537","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1","hostname":"sunsolve.sun.com","tags":["X Refsource CONFIRM","Patch"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2005-10-20T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T23:01:59.084Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:44:31.145Z","stale":false,"partial":false}}