CVE-2002-2099

The entry concerns CVE-2002-2099 affecting the GNU DataDisplay Debugger (DDD) 3.3.1. The vulnerability is a buffer overflow triggered by a long HOME environment variable, allowing a local user to execute arbitrary code and possibly gain privileges. The root cause is an overflow in DDD’s handling ...