37 matches found
CVE-2003-0613
Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file...
CVE-2003-0613
CVE-2003-0613 concerns a buffer overflow in zblast-svgalib (zblast 1.2.1 and earlier) that could allow a local user to execute arbitrary code via the high score file. Debian/Red Hat advisories confirm the vulnerability is local and provide fixes: upgrade zblast to the Debian 1.2pre-5woody2 (stabl...
CVE-2003-0613: Undefined Security Weakness
Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file...
DSA-310 xaos - improper setuid-root execution
Bulletin has no description...
Zblast 1.2 - 'Username' Local Buffer Overrun
// source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive data within the variable, it may be possible...
Zblast 1.2 - Username Local Buffer Overrun
Zblast 1.2 - Username Local Buffer Overrun // source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive...
CVE-1999-1483
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable...
CVE-1999-1483
The CVE-1999-1483 issue affects svgalib
CVE-1999-1482
SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl3 privileges to child processes...
CVE-1999-1482
CVE-1999-1482 affects SVGAlib’s zgv, version 3.0-7 and earlier. The underlying issue is a privilege leak of the iopl(3) privileges to child processes, enabling local users to gain root access. The provided documents confirm local-privilege escalation as the impact. No remediation or patch details...
CVE-1999-1483: Undefined Security Weakness
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable...
CVE-1999-1482: Undefined Security Weakness
SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl3 privileges to child processes...
itetris[v1.6.2] local root exploit (system()+../ protection)
i was auditing some svgalibsuid root programs and noticed itetris had a possibly exploitable system; call... which has since obviously proven exploitable or i wouldn't be posting this message. : ORIGINAL exploit url belowun-wrapped: http://realhalo.org/xitetris.c xitetris.c: / itetrisv1.6.2 local...
local exploit for linux's Koules1.4 package
/ Coolz.cpp - yep a C Plus Plus exploit, I like that Strings STL : This problem has been known since April this year, but I have not seen any exploit so far. First of all I wasn't planning to go and release another ordinary stack smash, but I found the setuid game on some wargame/hackme I played...
Jan Hubicka Koules 1.4 - Svgalib Local Buffer Overflow
Jan Hubicka Koules 1.4 - Svgalib Local Buffer Overflow / source: https://www.securityfocus.com/bid/1967/info Koules is an original, arcade-style game authored by Jan Hubicka. The version using svgalib is usually installed setuid root so that it may access video hardware when being run at the...
zgv.iopl.txt
Date: Fri, 19 Feb 1999 18:10:00 +0000 From: Chris Evans To: [email protected] Subject: Security hole: "zgv" Overview: "zgv" is an image viewer which runs under SVGAlib at the linux console probably BSD too. It has to be installed suid-root to access graphics hardware. History: "zgv" has a long...
