CVE-2008-3229

CVE-2008-3229 describes a stack-based buffer overflow vulnerability in the "op" utility, specifically when Xauth support is enabled, affecting versions prior to Changeset 563. This flaw allows a local attacker to gain elevated privileges by providing an excessively long XAUTHORITY environment variable. With a CVSS score of 6.9, it is considered a high-severity vulnerability due to its local attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit or ExploitDB, and it has received minimal community discussion or media coverage.