[SECURITY] [DSA 1036-1] New bsdgames packages fix local privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1036-1 [email protected] http://www.debian.org/security/ Steve Kemp April 17th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1744

BSDgames (sail) contains a buffer overflow in pl_main.c that affects versions before 2.17-7, enabling a local user to potentially execute arbitrary code via a long player name used in scanf. Multiple sources (Debian DSA-1036-1, SUSE CVE entry, OSV entries) confirm the flaw and local-privilege esc...