CVE-2007-0368 Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michiel broek mbse-bbs | = 0.33.17 | No fix listed |
| michiel broek mbse-bbs | = 0.33.18 | No fix listed |
| michiel broek mbse-bbs | = 0.33.19 | No fix listed |
| michiel broek mbse-bbs | = 0.33.20 | No fix listed |
| michiel broek mbse-bbs | = 0.35.7 | No fix listed |
| michiel broek mbse-bbs | = 0.36 | No fix listed |
| michiel broek mbse-bbs | = 0.38 | No fix listed |
| michiel broek mbse-bbs | = 0.60 | No fix listed |
| michiel broek mbse-bbs | = 0.70 | No fix listed |
References
- 20070118 mbsebbs 0.70.0 & below local root exploit mailing-list
- www.mbse.eu
- 22112 exploit vdb-entry
- mbsebbs-mbuseradd-bo(31639) vdb-entry
- 3154 exploit