ID | CVE-2004-2372 | ||||||
Sažetak | Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path. NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability. | ||||||
Reference | |||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:L/AC:L/Au:N/C:C/I:C/A:C | ||||||
Zadnje važnije ažuriranje | 19-05-2020 - 19:54 | ||||||
Objavljeno | 31-12-2004 - 05:00 |