Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aeon | Aeon | 0.1.8 (including) | 0.1.8 (including) |
| Aeon | Aeon | 0.1.9 (including) | 0.1.9 (including) |
| Aeon | Aeon | 0.2 (including) | 0.2 (including) |
| Aeon | Aeon | 0.2a (including) | 0.2a (including) |
References
- http://marc.info/?l=bugtraq\u0026m=111262942708249\u0026w=2
- http://security-tmp.h14.ru/exploits/23laeon.c.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19951
- http://marc.info/?l=bugtraq\u0026m=111262942708249\u0026w=2
- http://security-tmp.h14.ru/exploits/23laeon.c.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19951