Lucene search

K
osvGoogleOSV:DSA-445
HistoryFeb 21, 2004 - 12:00 a.m.

lbreakout2 - buffer overflow

2004-02-2100:00:00
Google
osv.dev
5

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

Ulf Härnhammar from the Debian Security Audit Project
discovered a vulnerability in
lbreakout2, a game, where proper bounds checking was not performed on
environment variables. This bug could be exploited by a local
attacker to gain the privileges of group “games”.

For the current stable distribution (woody) this problem has been
fixed in version 2.2.2-1woody1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you update your lbreakout2 package.

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P