Lucene search

K
osvGoogleOSV:DLA-202-1
HistoryApr 17, 2015 - 12:00 a.m.

wesnoth-1.8 - security update

2015-04-1700:00:00
Google
osv.dev
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

Ignacio R. Morelle discovered that missing path restrictions in the
Battle of Wesnoth game could result in the disclosure of arbitrary
files in the user’s home directory if malicious campaigns/maps are
loaded.

For the oldstable distribution (squeeze), this problem has been
fixed in version 1:1.8.5-1+deb6u1. See DSA-3218-1 for the versions of
the other releases.

CPENameOperatorVersion
wesnoth-1.8eq1:1.8.5-1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N