CVE-2005-0504

Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.

• CWE-119

• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html
• http://secunia.com/advisories/17002Vendor Advisory
• http://secunia.com/advisories/20163Vendor Advisory
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338Vendor Advisory
• http://secunia.com/advisories/26651Vendor Advisory
• http://secunia.com/advisories/30112
• http://securitytracker.com/id?1013273
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070
• http://www.debian.org/security/2006/dsa-1082
• http://www.redhat.com/support/errata/RHSA-2005-529.html
• http://www.redhat.com/support/errata/RHSA-2005-551.html
• http://www.redhat.com/support/errata/RHSA-2005-663.html
• http://www.redhat.com/support/errata/RHSA-2008-0237.html
• http://www.securityfocus.com/bid/12195Patch, Vendor Advisory
• http://www.ubuntu.com/usn/usn-508-1
• http://www.vupen.com/english/advisories/2005/1878
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html
• http://secunia.com/advisories/17002Vendor Advisory
• http://secunia.com/advisories/20163Vendor Advisory
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338Vendor Advisory
• http://secunia.com/advisories/26651Vendor Advisory
• http://secunia.com/advisories/30112
• http://securitytracker.com/id?1013273
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070
• http://www.debian.org/security/2006/dsa-1082
• http://www.redhat.com/support/errata/RHSA-2005-529.html
• http://www.redhat.com/support/errata/RHSA-2005-551.html
• http://www.redhat.com/support/errata/RHSA-2005-663.html
• http://www.redhat.com/support/errata/RHSA-2008-0237.html
• http://www.securityfocus.com/bid/12195Patch, Vendor Advisory
• http://www.ubuntu.com/usn/usn-508-1
• http://www.vupen.com/english/advisories/2005/1878
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770

Published

Mar 14, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0498Gigafast router (aka CompUSA router) allows remote attackers…
• CVE-2005-0499Gigafast router (aka CompUSA router) with the DNS proxy opti…
• CVE-2005-0500Internet Explorer 6.0 on Windows XP SP2 allows remote attack…
• CVE-2005-0501Buffer overflow in Bontago 1.1 and earlier allows remote att…
• CVE-2005-0502Directory traversal vulnerability in Xinkaa 1.0.3 and earlie…
• CVE-2005-0503uim before 0.4.5.1 trusts certain environment variables when…
• CVE-2005-0505Unknown vulnerability in Information Resource Manager (IRM) …
• CVE-2005-0506The Avaya IP Office Phone Manager, and other products such a…
• CVE-2005-0507Directory traversal vulnerability in SD Server 4.0.70 and ea…
• CVE-2005-0508Unknown vulnerability in Squiggle for Batik before 1.5.1 all…
• CVE-2005-0509Multiple cross-site scripting (XSS) vulnerabilities in the M…
• CVE-2005-0510The daemon for fallback-reboot before 0.995 allows attackers…