Debian Security Advisory DSA 390-1 (marbles)

The remote host is missing an update to marbles announced via advisory DSA 390-1. OpenVAS Vulnerability Test $Id: deb3901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 390-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2003-0830

Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable...

CVE-2003-0830

CVE-2003-0830 describes a local privilege escalation in marbles (versions up to 1.0.2 and earlier) caused by a buffer overflow when processing the HOME environment variable. The issue allows a local user to gain privileges (e.g., gid 'games' on Debian woody) due to unsafe handling of HOME. Public...