VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 9, 2008· Updated Apr 23, 2026

CVE-2008-1215

CVE-2008-1215

Description

Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • FreeBSD/FreeBSD2 versions
    cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*
  • NetBSD/NetBSD
    cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*
  • OpenBSD/OpenBSD2 versions
    cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*
  • NetBSD/userpppllm-create
  • Samba (software)/Pppllm-fuzzy

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

9

News mentions

0

No linked articles in our index yet.