QwikSec

Security Database

CVE

CWE

Training

CVE-2004-2372

Published: Aug 16, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path. NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

bochs-home-bo(15309)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_SECTRACK

http://www.securiteam.com/unixfocus/5XP0L1FC0M.html

x_refsource_MISC

http://sourceforge.net/project/shownotes.php?release_id=215733

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.