{"id": "DEBIAN:DSA-926-1:442DD", "bulletinFamily": "unix", "title": "[SECURITY] [DSA 926-1] New ketm packages fix privilege escalation", "description": "- --------------------------------------------------------------------------\nDebian Security Advisory DSA 926-1 security@debian.org\nhttp://www.debian.org/security/ Martin Schulze\nDecember 23rd, 2005 http://www.debian.org/security/faq\n- --------------------------------------------------------------------------\n\nPackage : ketm\nVulnerability : buffer overflow\nProblem type : local\nDebian-specific: no\nCVE ID : CVE-2005-3535\n\nSteve Kemp from the Debian Security Audit Project discovered a buffer\noverflow in ketm, an old school 2D-scrolling shooter game, that can be\nexploited to execute arbitrary code with group games privileges.\n\nFor the old stable distribution (woody) this problem has been fixed in\nversion 0.0.6-7woody0.\n\nFor the stable distribution (sarge) this problem has been fixed in\nversion 0.0.6-17sarge1.\n\nFor the unstable distribution (sid) this problem has been fixed in\nversion 0.0.6-17sarge1.\n\nWe recommend that you upgrade your ketm package.\n\n\nUpgrade Instructions\n- --------------------\n\nwget url\n will fetch the file for you\ndpkg -i file.deb\n will install the referenced file.\n\nIf you are using the apt-get package manager, use the line for\nsources.list as given below:\n\napt-get update\n will update the internal database\napt-get upgrade\n will install corrected packages\n\nYou may use an automated update by adding the resources from the\nfooter to the proper configuration.\n\n\nDebian GNU/Linux 3.0 alias woody\n- --------------------------------\n\n Source archives:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0.dsc\n Size/MD5 checksum: 601 689826ac63e2c43800b4a95477e4e025\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0.diff.gz\n Size/MD5 checksum: 102455 3d95dffde08a37f92b547b0d5c5cdd1f\n http://ftp.debian.org/debian/pool/main/k/ketm/ketm_0.0.6.orig.tar.gz\n Size/MD5 checksum: 2300316 815dd1ec3d3e34ed563c2e8b846c1873\n\n Alpha architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_alpha.deb\n Size/MD5 checksum: 2291294 d3ab0d5c4d226e85b22024ef26225118\n\n ARM architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_arm.deb\n Size/MD5 checksum: 2280012 770c1260ba4f98f207b933b85a76c77b\n\n Intel IA-32 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_i386.deb\n Size/MD5 checksum: 2270074 e7d544f6a7c93053e10e6dc57a9cdeca\n\n Intel IA-64 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_ia64.deb\n Size/MD5 checksum: 2314582 157ce41e4b56f4d04a51ea26e45ea701\n\n HP Precision architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_hppa.deb\n Size/MD5 checksum: 2304688 ae0eee4fac599d235df518c8aed02220\n\n Motorola 680x0 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_m68k.deb\n Size/MD5 checksum: 2265824 e7cf4caad4048013762bf2eef7fbe53c\n\n Big endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_mips.deb\n Size/MD5 checksum: 2285898 22b5967929450cfae83a009a864a0428\n\n Little endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_mipsel.deb\n Size/MD5 checksum: 2285466 67ad79342e043766c18d331d19927928\n\n PowerPC architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_powerpc.deb\n Size/MD5 checksum: 2283386 dabfa2d80c5178e7794a45c438dbd405\n\n IBM S/390 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_s390.deb\n Size/MD5 checksum: 2272008 92da299f8c913fdf9bd8decf4176cf2c\n\n Sun Sparc architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_sparc.deb\n Size/MD5 checksum: 2276286 3baa3ec01cdb1f9288af03703cfa27d5\n\n\nDebian GNU/Linux 3.1 alias sarge\n- --------------------------------\n\n Source archives:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0.dsc\n Size/MD5 checksum: 601 689826ac63e2c43800b4a95477e4e025\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0.diff.gz\n Size/MD5 checksum: 102455 3d95dffde08a37f92b547b0d5c5cdd1f\n http://ftp.debian.org/debian/pool/main/k/ketm/ketm_0.0.6.orig.tar.gz\n Size/MD5 checksum: 2300316 815dd1ec3d3e34ed563c2e8b846c1873\n\n Alpha architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_alpha.deb\n Size/MD5 checksum: 2291294 d3ab0d5c4d226e85b22024ef26225118\n\n ARM architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_arm.deb\n Size/MD5 checksum: 2280012 770c1260ba4f98f207b933b85a76c77b\n\n Intel IA-32 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_i386.deb\n Size/MD5 checksum: 2270074 e7d544f6a7c93053e10e6dc57a9cdeca\n\n Intel IA-64 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_ia64.deb\n Size/MD5 checksum: 2314582 157ce41e4b56f4d04a51ea26e45ea701\n\n HP Precision architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_hppa.deb\n Size/MD5 checksum: 2304688 ae0eee4fac599d235df518c8aed02220\n\n Motorola 680x0 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_m68k.deb\n Size/MD5 checksum: 2265824 e7cf4caad4048013762bf2eef7fbe53c\n\n Big endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_mips.deb\n Size/MD5 checksum: 2285898 22b5967929450cfae83a009a864a0428\n\n Little endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_mipsel.deb\n Size/MD5 checksum: 2285466 67ad79342e043766c18d331d19927928\n\n PowerPC architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_powerpc.deb\n Size/MD5 checksum: 2283386 dabfa2d80c5178e7794a45c438dbd405\n\n IBM S/390 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_s390.deb\n Size/MD5 checksum: 2272008 92da299f8c913fdf9bd8decf4176cf2c\n\n Sun Sparc architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_sparc.deb\n Size/MD5 checksum: 2276286 3baa3ec01cdb1f9288af03703cfa27d5\n\n\n These files will probably be moved into the stable distribution on\n its next update.\n\n- ---------------------------------------------------------------------------------\nFor apt-get: deb http://security.debian.org/ stable/updates main\nFor dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main\nMailing list: debian-security-announce@lists.debian.org\nPackage info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>\n\n", "published": "2005-12-23T00:00:00", "modified": "2005-12-23T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2005/msg00327.html", "reporter": "Debian", "references": [], "cvelist": ["CVE-2005-3535"], "type": "debian", "lastseen": "2020-11-11T13:17:54", "edition": 7, "viewCount": 1, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2005-3535"]}, {"type": "nessus", "idList": ["DEBIAN_DSA-926.NASL"]}, {"type": "osvdb", "idList": ["OSVDB:22065"]}, {"type": "openvas", "idList": ["OPENVAS:56054"]}, {"type": "debian", "idList": ["DEBIAN:DSA-926-2:735A1"]}], "modified": "2020-11-11T13:17:54", "rev": 2}, "score": {"value": 7.2, "vector": "NONE", "modified": "2020-11-11T13:17:54", "rev": 2}, "vulnersScore": 7.2}, "affectedPackage": [{"OS": "Debian", "OSVersion": "3.1", "arch": "all", "operator": "lt", "packageFilename": "ketm_0.0.6-17sarge1_all.deb", "packageName": "ketm", "packageVersion": "0.0.6-17sarge1"}, {"OS": "Debian", "OSVersion": "3", "arch": "all", "operator": "lt", "packageFilename": "ketm_0.0.6-7woody0_all.deb", "packageName": "ketm", "packageVersion": "0.0.6-7woody0"}], "scheme": null}

{"cve": [{"lastseen": "2020-10-03T11:34:57", "description": "Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors.", "edition": 3, "cvss3": {}, "published": "2005-12-27T23:03:00", "title": "CVE-2005-3535", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": true}, "cvelist": ["CVE-2005-3535"], "modified": "2008-09-05T20:54:00", "cpe": ["cpe:/a:ketm:ketm:0.0.6"], "id": "CVE-2005-3535", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-3535", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:ketm:ketm:0.0.6:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:19", "bulletinFamily": "software", "cvelist": ["CVE-2005-3535"], "edition": 1, "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:18225](https://secuniaresearch.flexerasoftware.com/advisories/18225/)\nOther Advisory URL: http://www.debian.org/security/2005/dsa-926\n[CVE-2005-3535](https://vulners.com/cve/CVE-2005-3535)\n", "modified": "2005-12-23T09:48:26", "published": "2005-12-23T09:48:26", "href": "https://vulners.com/osvdb/OSVDB:22065", "id": "OSVDB:22065", "type": "osvdb", "title": "ketm Local Overflow", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "openvas": [{"lastseen": "2017-07-24T12:50:05", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-3535"], "description": "The remote host is missing an update to ketm\nannounced via advisory DSA 926-2.\n\nSteve Kemp from the Debian Security Audit Project discovered a buffer\noverflow in ketm, an old school 2D-scrolling shooter game, that can be\nexploited to execute arbitrary code with group games privileges.\n\nFor the old stable distribution (woody) this problem has been fixed in\nversion 0.0.6-7woody0.", "modified": "2017-07-07T00:00:00", "published": "2008-01-17T00:00:00", "id": "OPENVAS:56054", "href": "http://plugins.openvas.org/nasl.php?oid=56054", "type": "openvas", "title": "Debian Security Advisory DSA 926-2 (ketm)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_926_2.nasl 6616 2017-07-07 12:10:49Z cfischer $\n# Description: Auto-generated from advisory DSA 926-2\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largerly excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_solution = \"For the stable distribution (sarge) this problem has been fixed in\nversion 0.0.6-17sarge1.\n\nFor the unstable distribution (sid) this problem has been fixed in\nversion 0.0.6-17sarge1.\n\nWe recommend that you upgrade your ketm package.\n\n https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20926-2\";\ntag_summary = \"The remote host is missing an update to ketm\nannounced via advisory DSA 926-2.\n\nSteve Kemp from the Debian Security Audit Project discovered a buffer\noverflow in ketm, an old school 2D-scrolling shooter game, that can be\nexploited to execute arbitrary code with group games privileges.\n\nFor the old stable distribution (woody) this problem has been fixed in\nversion 0.0.6-7woody0.\";\n\n\nif(description)\n{\n script_id(56054);\n script_version(\"$Revision: 6616 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-07 14:10:49 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2008-01-17 23:07:13 +0100 (Thu, 17 Jan 2008)\");\n script_bugtraq_id(16049);\n script_cve_id(\"CVE-2005-3535\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_name(\"Debian Security Advisory DSA 926-2 (ketm)\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"ketm\", ver:\"0.0.6-7woody0\", rls:\"DEB3.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"ketm-data\", ver:\"0.0.6-17sarge1\", rls:\"DEB3.1\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"ketm\", ver:\"0.0.6-17sarge1\", rls:\"DEB3.1\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "debian": [{"lastseen": "2020-11-11T13:12:44", "bulletinFamily": "unix", "cvelist": ["CVE-2005-3535"], "description": "- --------------------------------------------------------------------------\nDebian Security Advisory DSA 926-2 security@debian.org\nhttp://www.debian.org/security/ Martin Schulze\nDecember 23rd, 2005 http://www.debian.org/security/faq\n- --------------------------------------------------------------------------\n\nPackage : ketm\nVulnerability : buffer overflow\nProblem type : local\nDebian-specific: no\nCVE ID : CVE-2005-3535\n\nSteve Kemp from the Debian Security Audit Project discovered a buffer\noverflow in ketm, an old school 2D-scrolling shooter game, that can be\nexploited to execute arbitrary code with group games privileges.\n\nFor the old stable distribution (woody) this problem has been fixed in\nversion 0.0.6-7woody0.\n\nFor the stable distribution (sarge) this problem has been fixed in\nversion 0.0.6-17sarge1.\n\nFor the unstable distribution (sid) this problem has been fixed in\nversion 0.0.6-17sarge1.\n\nWe recommend that you upgrade your ketm package.\n\n\nUpgrade Instructions\n- --------------------\n\nwget url\n will fetch the file for you\ndpkg -i file.deb\n will install the referenced file.\n\nIf you are using the apt-get package manager, use the line for\nsources.list as given below:\n\napt-get update\n will update the internal database\napt-get upgrade\n will install corrected packages\n\nYou may use an automated update by adding the resources from the\nfooter to the proper configuration.\n\n\nDebian GNU/Linux 3.0 alias woody\n- --------------------------------\n\n Source archives:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0.dsc\n Size/MD5 checksum: 601 689826ac63e2c43800b4a95477e4e025\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0.diff.gz\n Size/MD5 checksum: 102455 3d95dffde08a37f92b547b0d5c5cdd1f\n http://ftp.debian.org/debian/pool/main/k/ketm/ketm_0.0.6.orig.tar.gz\n Size/MD5 checksum: 2300316 815dd1ec3d3e34ed563c2e8b846c1873\n\n Alpha architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_alpha.deb\n Size/MD5 checksum: 2291294 d3ab0d5c4d226e85b22024ef26225118\n\n ARM architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_arm.deb\n Size/MD5 checksum: 2280012 770c1260ba4f98f207b933b85a76c77b\n\n Intel IA-32 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_i386.deb\n Size/MD5 checksum: 2270074 e7d544f6a7c93053e10e6dc57a9cdeca\n\n Intel IA-64 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_ia64.deb\n Size/MD5 checksum: 2314582 157ce41e4b56f4d04a51ea26e45ea701\n\n HP Precision architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_hppa.deb\n Size/MD5 checksum: 2304688 ae0eee4fac599d235df518c8aed02220\n\n Motorola 680x0 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_m68k.deb\n Size/MD5 checksum: 2265824 e7cf4caad4048013762bf2eef7fbe53c\n\n Big endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_mips.deb\n Size/MD5 checksum: 2285898 22b5967929450cfae83a009a864a0428\n\n Little endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_mipsel.deb\n Size/MD5 checksum: 2285466 67ad79342e043766c18d331d19927928\n\n PowerPC architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_powerpc.deb\n Size/MD5 checksum: 2283386 dabfa2d80c5178e7794a45c438dbd405\n\n IBM S/390 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_s390.deb\n Size/MD5 checksum: 2272008 92da299f8c913fdf9bd8decf4176cf2c\n\n Sun Sparc architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-7woody0_sparc.deb\n Size/MD5 checksum: 2276286 3baa3ec01cdb1f9288af03703cfa27d5\n\n\nDebian GNU/Linux 3.1 alias sarge\n- --------------------------------\n\n Source archives:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1.dsc\n Size/MD5 checksum: 618 c16dea02615d3d54ad809da66f353567\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1.diff.gz\n Size/MD5 checksum: 49309 1db837fff1b5ed5e2a37bc6b3874ca70\n http://ftp.debian.org/debian/pool/main/k/ketm/ketm_0.0.6.orig.tar.gz\n Size/MD5 checksum: 2300316 815dd1ec3d3e34ed563c2e8b846c1873\n\n Architecture independent components:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm-data_0.0.6-17sarge1_all.deb\n Size/MD5 checksum: 2228258 f8e0206d18cb928629636ace10ad898c\n\n Alpha architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_alpha.deb\n Size/MD5 checksum: 100182 504db7244cfb3fa3f850d0ee174bf476\n\n AMD64 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_amd64.deb\n Size/MD5 checksum: 69582 2c2efd63e76afe5c680193d489815dec\n\n ARM architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_arm.deb\n Size/MD5 checksum: 69122 30ff71419a3e106bd067a983ed3db30f\n\n Intel IA-32 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_i386.deb\n Size/MD5 checksum: 61034 a8d7eae4795a1caa3c47dca929e93254\n\n Intel IA-64 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_ia64.deb\n Size/MD5 checksum: 126326 728cd5e277b43ac8aef87cf092478168\n\n HP Precision architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_hppa.deb\n Size/MD5 checksum: 89424 22aba3b17b99631d559d59d19ca0f669\n\n Motorola 680x0 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_m68k.deb\n Size/MD5 checksum: 50590 ac31fa12be1ac3fad1596d54a41e593b\n\n Big endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_mips.deb\n Size/MD5 checksum: 79420 2663c4a81111c9d3c9f43737a6899666\n\n Little endian MIPS architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_mipsel.deb\n Size/MD5 checksum: 79134 c461cd34b6ced500a3622ebaf51bd07b\n\n PowerPC architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_powerpc.deb\n Size/MD5 checksum: 83890 01c28fdaa89ec3aef148c0ac0dc1656a\n\n IBM S/390 architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_s390.deb\n Size/MD5 checksum: 63110 dd95bef4893b7e5a0722d462a3374c6f\n\n Sun Sparc architecture:\n\n http://security.debian.org/pool/updates/main/k/ketm/ketm_0.0.6-17sarge1_sparc.deb\n Size/MD5 checksum: 73232 8e4594ac0f872bad24ef232accb00d9a\n\n\n These files will probably be moved into the stable distribution on\n its next update.\n\n- ---------------------------------------------------------------------------------\nFor apt-get: deb http://security.debian.org/ stable/updates main\nFor dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main\nMailing list: debian-security-announce@lists.debian.org\nPackage info: `apt-cache show &lt;pkg&gt;&#x27; and http://packages.debian.org/&lt;pkg&gt;\n\n", "edition": 3, "modified": "2005-12-23T00:00:00", "published": "2005-12-23T00:00:00", "id": "DEBIAN:DSA-926-2:735A1", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2005/msg00328.html", "title": "[SECURITY] [DSA 926-2] New ketm packages fix privilege escalation", "type": "debian", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2021-01-06T10:03:43", "description": "Steve Kemp from the Debian Security Audit Project discovered a buffer\noverflow in ketm, an old school 2D-scrolling shooter game, that can be\nexploited to execute arbitrary code with group games privileges.", "edition": 25, "published": "2006-10-14T00:00:00", "title": "Debian DSA-926-2 : ketm - buffer overflow", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2005-3535"], "modified": "2006-10-14T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:ketm", "cpe:/o:debian:debian_linux:3.1", "cpe:/o:debian:debian_linux:3.0"], "id": "DEBIAN_DSA-926.NASL", "href": "https://www.tenable.com/plugins/nessus/22792", "sourceData": "#%NASL_MIN_LEVEL 70300\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-926. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(22792);\n script_version(\"1.17\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2005-3535\");\n script_xref(name:\"DSA\", value:\"926\");\n\n script_name(english:\"Debian DSA-926-2 : ketm - buffer overflow\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Steve Kemp from the Debian Security Audit Project discovered a buffer\noverflow in ketm, an old school 2D-scrolling shooter game, that can be\nexploited to execute arbitrary code with group games privileges.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.debian.org/security/2005/dsa-926\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the ketm package.\n\nFor the old stable distribution (woody) this problem has been fixed in\nversion 0.0.6-7woody0.\n\nFor the stable distribution (sarge) this problem has been fixed in\nversion 0.0.6-17sarge1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:ketm\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:3.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:3.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2005/12/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2006/10/14\");\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2005/12/23\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2006-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"3.0\", prefix:\"ketm\", reference:\"0.0.6-7woody0\")) flag++;\nif (deb_check(release:\"3.1\", prefix:\"ketm\", reference:\"0.0.6-17sarge1\")) flag++;\nif (deb_check(release:\"3.1\", prefix:\"ketm-data\", reference:\"0.0.6-17sarge1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}