CVE-2005-4581

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-29 · updated 2026-06-16

Description

Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.

Affected products

Scott Draves Electric Sheep: 2.6.3

References

http://draves.org/HyperNews/get.cgi/flame/1478.html
http://draves.org/HyperNews/get.cgi/flame/1478/1.html
http://electricsheep.org/index.cgi?&menu=talk
http://electricsheep.org/release_notes.html
http://www.securityfocus.com/archive/1/420160/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/23893
http://draves.org/HyperNews/get.cgi/flame/1478.html
http://draves.org/HyperNews/get.cgi/flame/1478/1.html
http://electricsheep.org/index.cgi?&menu=talk
http://electricsheep.org/release_notes.html
http://www.securityfocus.com/archive/1/420160/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/23893

Get alerted when CVE-2005-4581 or the next vulnerability affects your stack