Lucene search

K
freebsdFreeBSD84D3FBB2-E607-11DB-8A32-000C76189C4C
HistoryMar 27, 2007 - 12:00 a.m.

mcweject -- exploitable buffer overflow

2007-03-2700:00:00
vuxml.freebsd.org
22

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

0.4%

CVE reports:

Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on
FreeBSD, and possibly other versions, allows local users to execute
arbitrary code via a long command line argument, possibly involving
the device name.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmcweject<= 0.9UNKNOWN

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

0.4%

Related for 84D3FBB2-E607-11DB-8A32-000C76189C4C