TruBlueEnvironment takes the value of an environment variable and copies it into a buffer without performing any bounds checking. Since this buffer is stored on the stack, it is possible to overwrite the return stack frame and execute arbitrary code as root.
Workaround
Restrict access to the TruBlueEnvironment(*) executable, or remove it entirely if it is not being used. One approach to restricting access would be to remove global execute permissions from the TruBlueEnvironment executable, and only allow a specific group to execute the application.
The following commands will restrict access to the 'admin' group:
