Lucene search

K
osvGoogleOSV:DSA-345
HistoryJul 08, 2003 - 12:00 a.m.

xbl - buffer overflow

2003-07-0800:00:00
Google
osv.dev
3

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

Another buffer overflow was discovered in xbl, distinct from the one
addressed in DSA-327 (CAN-2003-0451), involving the
-display command
line option. This vulnerability could be exploited by a local
attacker to gain gid ‘games’.

For the stable distribution (woody) this problem has been fixed in
version 1.0k-3woody2.

For the unstable distribution (sid) this problem is fixed in version
1.0k-6.

We recommend that you update your xbl package.

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

Related for OSV:DSA-345