mah-jong - buffer overflows, denial of service

Nicolas Boullis discovered two vulnerabilities in mah-jong, a
network-enabled game.

• CAN-2003-0705 (buffer overflow)

This vulnerability could be exploited by a remote attacker to
execute arbitrary code with the privileges of the user running the
mah-jong server.

• CAN-2003-0706 (denial of service)

This vulnerability could be exploited by a remote attacker to cause
the mah-jong server to enter a tight loop and stop responding to
commands.

For the stable distribution (woody) these problems have been fixed in
version 1.4-2.

For the unstable distribution (sid) these problems have been fixed in
version 1.5.6-2.

We recommend that you update your mah-jong package.