CVEvulnerability

CVE-2007-0368

10.0 HIGH Published 2007-01-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-01-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.

Affected configurations

• michiel broek mbse-bbs 0.33.17 • michiel broek mbse-bbs 0.33.18 • michiel broek mbse-bbs 0.33.19 • michiel broek mbse-bbs 0.33.20 • michiel broek mbse-bbs 0.35.7 • michiel broek mbse-bbs 0.36 • michiel broek mbse-bbs 0.38 • michiel broek mbse-bbs 0.60 • michiel broek mbse-bbs 0.70

References