Lucene search

K
nvd[email protected]NVD:CVE-2008-3229
HistoryJul 18, 2008 - 4:41 p.m.

CVE-2008-3229

2008-07-1816:41:00
CWE-119
web.nvd.nist.gov
1

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.

Affected configurations

NVD
Node
swapoffopMatch1.1.10
OR
swapoffopMatch1.1.19
OR
swapoffopMatch1.20
OR
swapoffopMatch1.21
OR
swapoffopMatch1.22
OR
swapoffopMatch1.23
OR
swapoffopMatch1.24
OR
swapoffopMatch1.25
OR
swapoffopMatch1.26
OR
swapoffopMatch1.27
OR
swapoffopMatch1.28
OR
swapoffopMatch1.29
OR
swapoffopMatch1.30
OR
swapoffopMatch1.31
OR
swapoffopMatch1.32

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2008-3229