ISOMAN

CVE

CVE-2008-1215

Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.

Severity
MEDIUM
CVSS
4.6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
NetBSD10.1 acorn32 installunknownsource
NetBSD10.1 alpha installunknownsource
NetBSD10.1 amd64 bios-installunknownsource
NetBSD10.1 amd64 installunknownsource
NetBSD10.1 amd64 liveunknownsource
NetBSD10.1 amiga installunknownsource
NetBSD10.1 arc installunknownsource
NetBSD10.1 atari installunknownsource
NetBSD10.1 cats installunknownsource
NetBSD10.1 cobalt installunknownsource
NetBSD10.1 dreamcast installunknownsource
NetBSD10.1 emips installunknownsource
NetBSD10.1 evbarm-aarch64 installunknownsource
NetBSD10.1 evbarm-aarch64eb installunknownsource
NetBSD10.1 evbmips-mips64eb installunknownsource
NetBSD10.1 evbmips-mips64el installunknownsource
NetBSD10.1 evbmips-mipseb installunknownsource
NetBSD10.1 evbmips-mipsel installunknownsource
NetBSD10.1 evbmips-mipsn64eb installunknownsource
NetBSD10.1 evbmips-mipsn64el installunknownsource
NetBSD10.1 evbppc installunknownsource
NetBSD10.1 evbsh3-sh3eb installunknownsource
NetBSD10.1 evbsh3-sh3el installunknownsource
NetBSD10.1 ews4800mips installunknownsource
NetBSD10.1 hp300 installunknownsource
NetBSD10.1 hpcarm installunknownsource
NetBSD10.1 hpcmips installunknownsource
NetBSD10.1 hpcsh installunknownsource
NetBSD10.1 hppa installunknownsource
NetBSD10.1 i386 installunknownsource
NetBSD10.1 ia64 installunknownsource
NetBSD10.1 ibmnws installunknownsource
NetBSD10.1 luna68k installunknownsource
NetBSD10.1 mac68k installunknownsource
NetBSD10.1 macppc installunknownsource
NetBSD10.1 mipsco installunknownsource
NetBSD10.1 mvme68k installunknownsource
NetBSD10.1 mvmeppc installunknownsource
NetBSD10.1 news68k installunknownsource
NetBSD10.1 newsmips installunknownsource
NetBSD10.1 next68k installunknownsource
NetBSD10.1 ofppc installunknownsource
NetBSD10.1 pmax installunknownsource
NetBSD10.1 prep installunknownsource
NetBSD10.1 sandpoint installunknownsource
NetBSD10.1 sgimips installunknownsource
NetBSD10.1 shark installunknownsource
NetBSD10.1 sparc installunknownsource
NetBSD10.1 sparc64 installunknownsource
NetBSD10.1 sun2 installunknownsource
NetBSD10.1 sun3 installunknownsource
NetBSD10.1 vax installunknownsource
NetBSD10.1 x68k installunknownsource
NetBSD10.1 zaurus installunknownsource
NetBSD10.1 amd64 boot-comunknownsource
NetBSD10.1 amd64 bootunknownsource
NetBSD10.1 i386 boot-comunknownsource
NetBSD10.1 i386 bootunknownsource

References

  1. http://secunia.com/advisories/29234
  2. http://secunia.com/advisories/29238
  3. http://secunia.com/advisories/29240
  4. http://www.openbsd.org/errata41.html#014_ppp
  5. http://www.openbsd.org/errata42.html#009_ppp
  6. http://www.securityfocus.com/archive/82/488980/30/0/threaded
  7. http://www.securityfocus.com/archive/82/489031/30/0/threaded
  8. http://www.securityfocus.com/bid/28090
  9. https://exchange.xforce.ibmcloud.com/vulnerabilities/41034
  10. http://secunia.com/advisories/29234
  11. http://secunia.com/advisories/29238
  12. http://secunia.com/advisories/29240
  13. http://www.openbsd.org/errata41.html#014_ppp
  14. http://www.openbsd.org/errata42.html#009_ppp
  15. http://www.securityfocus.com/archive/82/488980/30/0/threaded
  16. http://www.securityfocus.com/archive/82/489031/30/0/threaded
  17. http://www.securityfocus.com/bid/28090
  18. https://exchange.xforce.ibmcloud.com/vulnerabilities/41034