CVE-2007-0368

Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-01-19

Last modified

2024-08-07

Affected products

• Mbse-bbs (Michiel Broek)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051859.html
• http://www.mbse.eu/mbse/mbsebbs/index.html
• http://www.securityfocus.com/bid/22112
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31639
• https://www.exploit-db.com/exploits/3154