harry has reported a vulnerability in mcweject, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to a boundary error within eject.c and can be exploited to cause a buffer overflow by providing an overly large argument on the command line.

Successful exploitation may allow execution of arbitrary code with escalated privileges, but requires that the application is installed with the setuid bit set.

The vulnerability is reported in version 0.9. Other versions may also be affected.

Solution
Reportedly fixed in the port tree.

Provided and/or discovered by
harry

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/3578

Deep Links
Links available to Secunia VIM customers