PT-2008-1085 · Linux+2 · Linux Audit+2
Publicado
2008-04-02
·
Atualizado
2021-09-29
·
CVE-2008-1628
CVSS v2.0
4.1
Média
| Vetor | AV:L/AC:M/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux Audit versions prior to 1.7.3
Gentoo Linux (affected versions not specified)
Description
The issue is related to a stack-based buffer overflow in the
audit log user command function, potentially allowing remote attackers to execute arbitrary code via a long command argument. This could lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out locally by an authenticated attacker.Recommendations
For Linux Audit versions prior to 1.7.3, update to version 1.7.3 or later to resolve the issue.
For Gentoo Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Gentoo Linux
Linux Audit