Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linuxconf | Jacques_gelinas | 1.1.6r10 (including) | 1.1.6r10 (including) |
| Linuxconf | Jacques_gelinas | 1.1.7 (including) | 1.1.7 (including) |
| Linuxconf | Jacques_gelinas | 1.1.8 (including) | 1.1.8 (including) |
| Linuxconf | Jacques_gelinas | 1.1.9r1 (including) | 1.1.9r1 (including) |
| Linuxconf | Jacques_gelinas | 1.1.9r2 (including) | 1.1.9r2 (including) |
| Linuxconf | Jacques_gelinas | 1.2 (including) | 1.2 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1 (including) | 1.2.1 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r1 (including) | 1.2.1r1 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r2 (including) | 1.2.1r2 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r3 (including) | 1.2.1r3 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r4 (including) | 1.2.1r4 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r5 (including) | 1.2.1r5 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r6 (including) | 1.2.1r6 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r7 (including) | 1.2.1r7 (including) |
| Linuxconf | Jacques_gelinas | 1.2.1r8 (including) | 1.2.1r8 (including) |
| Linuxconf | Jacques_gelinas | 1.2.2 (including) | 1.2.2 (including) |
| Linuxconf | Jacques_gelinas | 1.2.3 (including) | 1.2.3 (including) |
| Linuxconf | Jacques_gelinas | 1.2.3r1 (including) | 1.2.3r1 (including) |
| Linuxconf | Jacques_gelinas | 1.2.3r2 (including) | 1.2.3r2 (including) |
| Linuxconf | Jacques_gelinas | 1.2.4 (including) | 1.2.4 (including) |
| Linuxconf | Jacques_gelinas | 1.2.4r2 (including) | 1.2.4r2 (including) |
| Linuxconf | Jacques_gelinas | 1.2.4r4 (including) | 1.2.4r4 (including) |
| Linuxconf | Jacques_gelinas | 1.2.4r5 (including) | 1.2.4r5 (including) |
| Linuxconf | Jacques_gelinas | 1.2r1 (including) | 1.2r1 (including) |
| Linuxconf | Jacques_gelinas | 1.2r2 (including) | 1.2r2 (including) |
| Linuxconf | Jacques_gelinas | 1.27 (including) | 1.27 (including) |
| Linuxconf | Jacques_gelinas | 1.27r3 (including) | 1.27r3 (including) |
| Linuxconf | Jacques_gelinas | 1.27r4 (including) | 1.27r4 (including) |
| Linuxconf | Jacques_gelinas | 1.27r5 (including) | 1.27r5 (including) |
| Linuxconf | Jacques_gelinas | 1.28 (including) | 1.28 (including) |
| Linuxconf | Jacques_gelinas | 1.28r1 (including) | 1.28r1 (including) |
| Linuxconf | Jacques_gelinas | 1.28r2 (including) | 1.28r2 (including) |
| Linuxconf | Jacques_gelinas | 1.28r3 (including) | 1.28r3 (including) |