CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
65.0%
Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.
Vendor | Product | Version | CPE |
---|---|---|---|
michiel_broek | mbse-bbs | 0.33.17 | cpe:2.3:a:michiel_broek:mbse-bbs:0.33.17:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.33.18 | cpe:2.3:a:michiel_broek:mbse-bbs:0.33.18:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.33.19 | cpe:2.3:a:michiel_broek:mbse-bbs:0.33.19:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.33.20 | cpe:2.3:a:michiel_broek:mbse-bbs:0.33.20:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.35.7 | cpe:2.3:a:michiel_broek:mbse-bbs:0.35.7:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.36 | cpe:2.3:a:michiel_broek:mbse-bbs:0.36:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.38 | cpe:2.3:a:michiel_broek:mbse-bbs:0.38:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.60 | cpe:2.3:a:michiel_broek:mbse-bbs:0.60:*:*:*:*:*:*:* |
michiel_broek | mbse-bbs | 0.70 | cpe:2.3:a:michiel_broek:mbse-bbs:0.70:*:*:*:*:*:*:* |