CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: integer overflow in the getword function in options.c in pppd in paul's ppp package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2014-11-15
Last Modified Date: 2016-10-25