CVE-2005-4639

Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by "reading more than 8 bytes into an 8 byte long array".

• http://secunia.com/advisories/18216Patch, Vendor Advisory
• http://secunia.com/advisories/18527Patch, Vendor Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:040
• http://www.securityfocus.com/bid/16142Patch
• http://www.vupen.com/english/advisories/2006/0035
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43323
• https://usn.ubuntu.com/244-1/
• http://secunia.com/advisories/18216Patch, Vendor Advisory
• http://secunia.com/advisories/18527Patch, Vendor Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:040
• http://www.securityfocus.com/bid/16142Patch
• http://www.vupen.com/english/advisories/2006/0035
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43323
• https://usn.ubuntu.com/244-1/

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4633Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-4634SQL injection vulnerability in index.php in ActiveCampaign S…
• CVE-2005-4635The nl_fib_input function in fib_frontend.c in the Linux ker…
• CVE-2005-4636OpenOffice.org 2.0 and earlier, when hyperlinks has been dis…
• CVE-2005-4637Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2005-4638index.php in Kayako SupportSuite 3.00.26 and earlier allow r…
• CVE-2005-4640SQL injection vulnerability in index.php in class-1 Poll Sof…
• CVE-2005-4641SQL injection vulnerability in home.php in eazyCMS 2.0 allow…
• CVE-2005-4642Multiple cross-site scripting (XSS) vulnerabilities in Hydro…
• CVE-2005-4643SQL injection vulnerability in index.php in Antharia OnConte…
• CVE-2005-4644Cross-site scripting (XSS) vulnerability in the HTML WikiPro…
• CVE-2005-4645SQL injection vulnerability in index.php in 3CFR allows remo…