Skip to content
OpenAdvisories
Unscored DSA-918-1 2 CVEs

osh - programming error

Published Dec 9, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 osh 1.7-11woody2
Debian · 3.1 osh 1.7-13sarge1

Vulnerabilities 2

  • Unscored —
    CVE-2005-3346 Public exploit

    Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbi…

  • Unscored —
    CVE-2005-3533 Public exploit

    Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory …