CVE-2008-3229

Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
swapoffop
1.1.10
swapoffop
1.1.19
swapoffop
1.20
swapoffop
1.21
swapoffop
1.22
swapoffop
1.23
swapoffop
1.24
swapoffop
1.25
swapoffop
1.26
swapoffop
1.27
swapoffop
1.28
swapoffop
1.29
swapoffop
1.30
swapoffop
1.31
swapoffop
1.32
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
op
hardy
not-affected
gutsy
dne
feisty
dne
dapper
dne
Common Weakness Enumeration
References
http://secunia.com/advisories/31103
http://swapoff.org/changeset/563
http://www.openwall.com/lists/oss-security/2008/07/12/4
http://www.securityfocus.com/bid/30226
https://exchange.xforce.ibmcloud.com/vulnerabilities/43836
http://secunia.com/advisories/31103
http://swapoff.org/changeset/563
http://www.openwall.com/lists/oss-security/2008/07/12/4
http://www.securityfocus.com/bid/30226
https://exchange.xforce.ibmcloud.com/vulnerabilities/43836