CVE-2004-0238

Name: CVE-2004-0238
Creator: NVD / NIST
Published: 2004-11-23T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 5.16%

Last modified Jun 16, 2026

CVE-2004-0238 is a vulnerability of currently unknown severity. Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.. EPSS estimates a 5.16% chance of exploitation in the next 30 days.

Description

Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.

Metrics

EPSS Probability

5.16%

91.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
0verkill	0verkill	0.16

References

Timeline

Published: Nov 23, 2004
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2004-0238?

How severe is CVE-2004-0238?

Severity scoring for CVE-2004-0238 is pending analysis. The EPSS model estimates a 5.16% probability of exploitation in the next 30 days.

How do I fix CVE-2004-0238?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0238?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST