CVE-2005-3346

CVE-2005-3346 describes a buffer overflow vulnerability in OSH 1.7-14, specifically within its environment variable substitution code. This flaw allows local users to inject arbitrary environment variables, such as LD_PRELOAD, by crafting specific pathname arguments. The vulnerability carries a CVSS score of 7.2 (High), indicating a local attack vector with low attack complexity, and a complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 86/100, highlighting its significant potential impact. While not listed on the CISA KEV or Hot List, and lacking Metasploit or Nuclei modules, an exploit (EDB-1300) for local privilege escalation exists on ExploitDB. Despite this, there is minimal community discussion or media coverage surrounding this CVE.