« Volver al listado

CVE-2008-3229

Estado: ModificadaMedia (6.9)—

Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Swapoff — OP

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-3229",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-07-18T16:41:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/31103",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://swapoff.org/changeset/563",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2008/07/12/4",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/30226",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43836",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31103",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://swapoff.org/changeset/563",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2008/07/12/4",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/30226",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43836",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado pila en versiones de op anteriores a changeset 563, cuando el soporte de xauth está activado, permite a usuarios locales obtener privilegios a través de una variable de entorno XAUTHORITY excesivamente larga."
    }
  ],
  "lastModified": "2026-06-16T22:55:25.507",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E5B09D3-5848-4269-9574-36521E0667C1"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.1.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A67E7264-E8F3-4A3A-B476-1C090A01FC50"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C91F4524-646F-47B8-89E7-A1EF9E76477A"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAA77274-997F-4481-A184-2F3D0CA572F2"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71B4C85D-145F-495C-8FE9-A0084ACA055E"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3790E8DA-C515-48D8-8699-DBB68B9F1ED5"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8391B195-120D-4B96-88F3-4D39FE3DBF37"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7DB76FB7-3B2A-4558-9E04-99F38E8479B1"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84391240-3FC8-4032-9933-462F70B14FE4"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADD576DE-3A3A-437F-BA7A-2B97CBEF509E"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B27F4F4A-9AF6-4899-A7D9-29588AB78BFC"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CFF163E-A8FD-4EF9-B214-91C96175D8E0"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD313A7C-07D0-4AEC-AF2D-1DA499C98348"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0660F09A-BB50-461F-8B94-15A95D14C5DC"
            },
            {
              "criteria": "cpe:2.3:a:swapoff:op:1.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "422E4D96-78E5-4605-B99F-38825BCDB619"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}