Description
Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises.
References
- http://www.mnin.org/advisories/2008_symarkpb.pdf
- 29111 third-party-advisory
- 28015 vdb-entry
- http://www.symark.com/support/PBFeb2008Announcement.html
- powerbroker-argv-bo(40872) vdb-entry