CVE-2007-0368: Michiel Broek Mbse-Bbs

High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable.

Affected products

• Michiel Broek Mbse-Bbs: version 0.33.17 only; version 0.33.18 only; version 0.33.19 only; version 0.33.20 only; version 0.35.7 only; version 0.36 only; …

Published 2007-01-19. Last modified 2026-06-16.