CVE

Id
24546  
CVE No.
CVE-2007-1189  
Status
Candidate  
Description
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by (1) modifying the iseve function to gain privileges and (2) making the devpermcheck function grant unrestricted device permissions.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments