CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: this vulnerability allows local attackers to escalate privileges on vulnerable installations of joyent smartos release-20170803-20170803t064301z. an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. the specific flaw exists within the smb_ioc_svcenum ioctl. the issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. an attacker can leverage this vulnerability to execute code under the context of the host os. was zdi-can-4983.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-02-21
Last Modified Date: 2019-10-09