CVE-2008-1056: Symark Powerbroker

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv[0] string when executing (1) pbrun, (2) pbsh, or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises.

Affected products

• Symark Powerbroker: version 2.8 only; version 3.0 only; version 3.2 only; version 3.5 only; version 4.0 only; version 5.0 only; …

Published 2008-02-28. Last modified 2026-06-16.