Skip to content
Fencer Vulns
high 7.5

CVE-2005-3964 json

Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code…

published 2005-12-02 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3959

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
4.6%
EPSS 4.6% chance of exploitation in 30 days, percentile 91%
public exploits
0
none known

Summary

Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c.

Patch / fix

  • jabberd network satellite 4.2 2.0s10-3.37.rhn
  • jabberd network satellite 5.0, network satellite 4.2 2.0s10-3.38.rhn
  • tomcat5 network satellite 5.0, network satellite 4.2 5.0.30-0jpp_10rh
  • jfreechart network satellite 5.0, network satellite 4.2 0.9.20-3.rhn
  • rhn-apache network satellite 4.2 1.3.27-36.rhn.rhel3
  • rhn-apache network satellite 5.0, network satellite 4.2 1.3.27-36.rhn.rhel4
  • rhn-modssl network satellite 4.2 2.8.12-8.rhn.10.rhel3
  • rhn-modssl network satellite 5.0, network satellite 4.2 2.8.12-8.rhn.10.rhel4

red hat advisories RHSA-2008:0524RHSA-2008:0261RHSA-2006:0272

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2005-3964 updated

openmotif libUil buffer overflows

  • Red Hat Desktop version 3 openmotif 2.2.3-5.RHEL3.3, openmotif21 2.1.30-9.RHEL3.7 Red Hat Enterprise Linux AS version 3 openmotif 2.2.3-5.RHEL3.3, openmotif21 2.1.30-9.RHEL3.7 Red Hat Enterprise Linux AS version 4 openmotif 2.2.3-10.RHEL4.1, openmotif21 2.1.30-11.RHEL4.5 Red Hat Enterprise Linux Desktop version 4 openmotif 2.2.3-10.RHEL4.1, openmotif21 2.1.30-11.RHEL4.5 Red Hat Enterprise Linux ES version 3 openmotif 2.2.3-5.RHEL3.3, openmotif21 2.1.30-9.RHEL3.7 Red Hat Enterprise Linux ES version 4 openmotif 2.2.3-10.RHEL4.1, openmotif21 2.1.30-11.RHEL4.5
    +2 more products
    Red Hat Enterprise Linux WS version 3 openmotif 2.2.3-5.RHEL3.3, openmotif21 2.1.30-9.RHEL3.7 Red Hat Enterprise Linux WS version 4 openmotif 2.2.3-10.RHEL4.1, openmotif21 2.1.30-11.RHEL4.5
    fixed: vendor fix RHSA-2006:0272
  • Red Hat Satellite 5.0 (RHEL v.4 AS) jabberd 2.0s10-3.38.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el4, rhn-modperl 1.29-16.rhel4, openmotif21 2.1.30-11.RHEL4.6, +4 more
    fixed: vendor fix RHSA-2008:0261
  • Red Hat Satellite v 4.2 (RHEL v.3 AS) jabberd 2.0s10-3.37.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el3, rhn-modperl 1.29-16.rhel3, openmotif21 2.1.30-9.RHEL3.8, +4 more Red Hat Satellite v 4.2 (RHEL v.4 AS) jabberd 2.0s10-3.38.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el4, rhn-modperl 1.29-16.rhel4, openmotif21 2.1.30-11.RHEL4.6, +4 more
    fixed: vendor fix RHSA-2008:0524

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

4.55% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.