CVE-2008-1215: Medium – Stack-based buffer overflow in the command_Expand_Interpret function

CWE Weakness Definitions

CWE-264: Permissions, Privileges, and Access Controls

Broad class covering failures in permission enforcement. Deprecated in favor of CWE-284, CWE-862, CWE-863.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2008. A medium severity vulnerability affects Freebsd systems (CVE-2008-1215). Public exploit code is available. Isolate affected systems if patching is not feasible.

BSID: BS-2008-GLOBAL-079134-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2008-1215?

This vulnerability was disclosed in 2008. A medium severity vulnerability affects Freebsd systems (CVE-2008-1215). Public exploit code is available. Isolate affected systems if patching is not feasible.

What is the CVSS score for CVE-2008-1215?

CVE-2008-1215 has CVSS 4.6 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. EPSS: 0.8%.

Is CVE-2008-1215 actively exploited?

Public exploit available for CVE-2008-1215. Exploitation risk elevated.

How do I remediate CVE-2008-1215?

Priority: MONITOR. PSIRT: [email protected]

What systems are affected by CVE-2008-1215?

CVE-2008-1215 affects Freebsd Freebsd; Netbsd Netbsd; Openbsd Openbsd.

Vulnerability Details

CVE ID	`CVE-2008-1215`
BSID	`BS-2008-GLOBAL-079134-M` BreachSpider Global ID
CVSS Vector	`AV:L/AC:L/Au:N/C:P/I:P/A:P`
Published	2008-03-09
Last Modified	2026-04-23
ICS Relevance	0%
Weakness (CWE)	Permissions, Privileges, and Access Controls
Source	NVD

Official Description

Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters. CVSS vector: AV:L/AC:L/Au:N/C:P/I:P/A:P.

Exploitation Likelihood: MEDIUM

Affected Products

Vendor	Product	Affected Versions
Freebsd	Freebsd	`6.3` `7.0`
Netbsd	Netbsd	`All versions`
Openbsd	Openbsd	`4.1` `4.2`

Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 6795 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	⚠ Available — Reference
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`rule-based-v1`
Confidence	MEDIUM
Enriched At	2026-05-24
SHA-512 Audit Hash	`c57be958c8c447cf501654c30b539b349c8195b27c53a914d01393a7431e5a8693772ac64db025e49e0b5036cf3fbaa020648b165dd6cbaab4c800f28615eebd`

Related CVEs affecting Freebsd

CVE-2000-0584 10.0 Buffer overflow in Canna input system allows remote attackers to execute arbi... CVE-1999-0798 10.0 Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malfor... CVE-1999-0046 10.0 Buffer overflow of rlogin program using TERM environmental variable. CVE-1999-0323 10.0 FreeBSD mmap function allows users to modify append-only or immutable files. CVE-2001-0247 10.0 Buffer overflows in BSD-based FTP servers allows remote attackers to execute ...

View all Freebsd CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →