8 matches found
EUVD-2001-0087
Malware in sbrugna...
Itetris 1.6.1/1.6.2 Privileged Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2139/info Itetris, or Intelligent Tetris, is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video hardware when run by a regular...
CVE-2001-0087
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program...
CVE-2001-0087
CVE-2001-0087 affects itetris/xitetris 1.6.2 and earlier. The vulnerability arises because the program trusts the PATH environment variable to locate and execute the gunzip program, enabling local users to gain root privileges by arranging PATH to point to a crafted, malicious gunzip. The connect...
CVE-2001-0087: Undefined Security Weakness
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program...
itetris[v1.6.2] local root exploit (system()+../ protection)
i was auditing some svgalibsuid root programs and noticed itetris had a possibly exploitable system; call... which has since obviously proven exploitable or i wouldn't be posting this message. : ORIGINAL exploit url belowun-wrapped: http://realhalo.org/xitetris.c xitetris.c: / itetrisv1.6.2 local...
Itetris 1.6.11.6.2 - Privileged Arbitrary Command Execution
Itetris 1.6.11.6.2 - Privileged Arbitrary Command Execution // source: https://www.securityfocus.com/bid/2139/info Itetris, or "Intelligent Tetris", is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video...
Itetris 1.6.1/1.6.2 - Privileged Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/2139/info Itetris, or "Intelligent Tetris", is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video hardware when run by a regular user. Itetris contains a...