CVE-2008-1215
published 2008-03-09CVE-2008-1215: Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and…
PriorityP422medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EXPLOIT
EPSS
0.79%
51.7th percentile
Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| openbsd | openbsd | — | — |
| openbsd | openbsd | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/29234http://secunia.com/advisories/29238http://secunia.com/advisories/29240http://www.openbsd.org/errata41.html#014_ppphttp://www.openbsd.org/errata42.html#009_ppphttp://www.securityfocus.com/archive/82/488980/30/0/threadedhttp://www.securityfocus.com/archive/82/489031/30/0/threadedhttp://www.securityfocus.com/bid/28090https://exchange.xforce.ibmcloud.com/vulnerabilities/41034http://secunia.com/advisories/29234http://secunia.com/advisories/29238http://secunia.com/advisories/29240http://www.openbsd.org/errata41.html#014_ppphttp://www.openbsd.org/errata42.html#009_ppphttp://www.securityfocus.com/archive/82/488980/30/0/threadedhttp://www.securityfocus.com/archive/82/489031/30/0/threadedhttp://www.securityfocus.com/bid/28090https://exchange.xforce.ibmcloud.com/vulnerabilities/41034
2008-03-09
Published