Required CVE Record Information
Description
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
References 9 Total
- securityfocus.com: 9893 vdb-entry
- securitytracker.com: 1009398 vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541
- securityfocus.com: 20040315 Crafty Game Stack Overflow & Exploit mailing-list
- http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt
- exchange.xforce.ibmcloud.com: crafty-long-argument-bo(13017) vdb-entry
- securitytracker.com: 1009393 vdb-entry
- exchange.xforce.ibmcloud.com: crafty-command-line-bo(15501) vdb-entry
- secunia.com: 9577 third-party-advisory
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 9 Total
- securityfocus.com: 9893 vdb-entryx_transferred
- securitytracker.com: 1009398 vdb-entryx_transferred
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541 x_transferred
- securityfocus.com: 20040315 Crafty Game Stack Overflow & Exploit mailing-listx_transferred
- http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt x_transferred
- exchange.xforce.ibmcloud.com: crafty-long-argument-bo(13017) vdb-entryx_transferred
- securitytracker.com: 1009393 vdb-entryx_transferred
- exchange.xforce.ibmcloud.com: crafty-command-line-bo(15501) vdb-entryx_transferred
- secunia.com: 9577 third-party-advisoryx_transferred