Michiel Broek mbse-bbs up to 0.70 stack-based overflow

Summaryinfo

A vulnerability was found in Michiel Broek mbse-bbs up to 0.70. It has been rated as critical. Affected is an unknown function. The manipulation leads to stack-based overflow. This vulnerability is uniquely identified as CVE-2007-0368. Moreover, an exploit is present.

Detailsinfo

A vulnerability, which was classified as very critical, has been found in Michiel Broek mbse-bbs up to 0.70. This issue affects an unknown function. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.

The weakness was disclosed 01/19/2007 by prdelka (Website). The advisory is shared at lists.grok.org.uk. The identification of this vulnerability is CVE-2007-0368 since 01/19/2007. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/18/2024).

A public exploit has been developed by prdelka in ANSI C and been published even before and not after the advisory. The exploit is available at securityfocus.com. It is declared as functional. The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k.

The vulnerability is also documented in the databases at X-Force (31639), Exploit-DB (3154) and SecurityFocus (BID 22112†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Michiel Broek

Name

• mbse-bbs

Version

• 0.33.17
• 0.33.18
• 0.33.19
• 0.33.20
• 0.35.7
• 0.36
• 0.38
• 0.60
• 0.70

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion