Description
Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.
References
- FEDORA-2005-148 vendor-advisory
- http://www.kde.org/info/security/advisory-20050215-1.txt
- GLSA-200502-23 vendor-advisory
- 14306 third-party-advisory