CVE-2005-0504

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-03-14 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.

Affected products

Linux kernel: through 2.6.21; 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 (+200)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html
http://secunia.com/advisories/17002
http://secunia.com/advisories/20163
http://secunia.com/advisories/20202
http://secunia.com/advisories/20338
http://secunia.com/advisories/26651
http://secunia.com/advisories/30112
http://securitytracker.com/id?1013273
http://www.debian.org/security/2006/dsa-1067
http://www.debian.org/security/2006/dsa-1069
http://www.debian.org/security/2006/dsa-1070

Get alerted when CVE-2005-0504 or the next vulnerability affects your stack