CVE-2008-3229

Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/07/12/4
http://swapoff.org/changeset/563	Exploit
http://secunia.com/advisories/31103
http://www.securityfocus.com/bid/30226
https://exchange.xforce.ibmcloud.com/vulnerabilities/43836

Configuration 1

cpe:2.3:a:swapoff:op:1.23:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.28:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.24:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.1.10:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.26:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.22:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.29:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.1.19:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.20:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.31:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.32:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.30:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.27:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.21:*:*:*:*:*:*:* cpe:2.3:a:swapoff:op:1.25:*:*:*:*:*:*:*

---

Published : 2008-07-18 04:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3229

Mitre link : CVE-2008-3229

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer