CVE-2008-1215

FreeBSD 6.3 and 7.0 - Stack-Based Buffer Overflow in ppp command_Expand_Interpret

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1215. PoCs published by sipherr.

AI-analyzed exploit summary The provided text is a vulnerability description for CVE-2008-1215, detailing a local denial-of-service (DoS) vulnerability in BSD PPP due to inadequate boundary checks. It mentions potential arbitrary code execution but lacks actual exploit code.

Description

Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.

Exploits (1)

exploitdb WRITEUP VERIFIED

by sipherr · textdosbsd

https://www.exploit-db.com/exploits/31333

View Code ZIP pw:eip

The provided text is a vulnerability description for CVE-2008-1215, detailing a local denial-of-service (DoS) vulnerability in BSD PPP due to inadequate boundary checks. It mentions potential arbitrary code execution but lacks actual exploit code.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Theoretical

Target: BSD PPP (FreeBSD 6.3, unspecified NetBSD and OpenBSD versions)

No auth needed

Prerequisites: Local access to the target system

MITRE ATT&CK