5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Ignacio R. Morelle discovered that missing path restrictions in the
Battle of Wesnoth game could result in the disclosure of arbitrary
files in the user’s home directory if malicious campaigns/maps are
loaded.
For the oldstable distribution (squeeze), this problem has been
fixed in version 1:1.8.5-1+deb6u1. See DSA-3218-1 for the versions of
the other releases.
CPE | Name | Operator | Version |
---|---|---|---|
wesnoth-1.8 | eq | 1:1.8.5-1 |