CVE-2008-1056 in PowerBroker

Riassunto

di VulDB • 04/07/2026

Multiple heap-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 28/02/2008
• Divulgazione: 28/02/2008
• Moderazione: accettato
• Voce: VDB-41255
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 9.3 (VulDB)
• EPSS: 0.00418
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-1056
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-1056
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-1056/