CVE-2008-1056 Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the...
MediumCVSS 6.9
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symark powerbroker | = 2.8 | No fix listed |
| symark powerbroker | = 3.0 | No fix listed |
| symark powerbroker | = 3.2 | No fix listed |
| symark powerbroker | = 3.5 | No fix listed |
| symark powerbroker | = 4.0 | No fix listed |
| symark powerbroker | = 5.0 | No fix listed |
| symark powerbroker | = 5.01 | No fix listed |
References
- 29111 third-party-advisory vendor-advisory
- www.mnin.org exploit
- 28015 patch vdb-entry
- www.symark.com patch
- powerbroker-argv-bo(40872) vdb-entry