CVEvulnerability
CVE-2008-3229
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.
Affected configurations
• swapoff op 1.1.10
• swapoff op 1.1.19
• swapoff op 1.20
• swapoff op 1.21
• swapoff op 1.22
• swapoff op 1.23
• swapoff op 1.24
• swapoff op 1.25
• swapoff op 1.26
• swapoff op 1.27
• swapoff op 1.28
• swapoff op 1.29
• swapoff op 1.30
• swapoff op 1.31
• swapoff op 1.32
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/31103 secunia.com
- http://swapoff.org/changeset/563 Exploit
- http://www.openwall.com/lists/oss-security/2008/07/12/4 www.openwall.com
- http://www.securityfocus.com/bid/30226 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43836 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/31103 secunia.com
- http://swapoff.org/changeset/563 Exploit
- http://www.openwall.com/lists/oss-security/2008/07/12/4 www.openwall.com
- http://www.securityfocus.com/bid/30226 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43836 exchange.xforce.ibmcloud.com