PT-2002-2176 · Freebsd+1 · Freebsd+1

Publicado 2002-10-15 · Atualizado 2017-07-11 · CVE-2002-1192

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: NetBSD versions 1.6 and earlier FreeBSD version 4.6

Description: The issue is related to multiple buffer overflows in the rogue game, which can be exploited by local users to gain "games" group privileges. This is achieved through the use of malformed entries in a game save file.

Recommendations: For NetBSD versions 1.6 and earlier, consider restricting access to the rogue game until a fix is available. For FreeBSD version 4.6, avoid using the rogue game with untrusted save files until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-1192

Produtos afetados

Freebsd

Netbsd

Referências · 9

• 🔥 https://exploit-db.com/exploits/21881 · Exploit
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=103342413220529&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1192 · Nota de Segurança
• http://osvdb.org/6098 · Nota
• http://secunia.com/advisories/7181 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10261 · Nota
• http://secunia.com/advisories/7252 · Nota
• http://securityfocus.com/bid/5837 · Nota