PT-2004-1021 · Unknown · Lbreakout2

Publicado 2004-03-10 · Atualizado 2017-07-11 · CVE-2004-0158

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions lbreakout2 (affected versions not specified)

Description The issue concerns a buffer overflow in lbreakout2, allowing local users to gain 'games' group privileges. This can be achieved by setting a large HOME environment variable, affecting various components such as editor.c, theme.c, manager.c, config.c, game.c, levels.c, or main.c. Additionally, there are multiple vulnerabilities in the lbreakout2 package that can lead to breaches of confidentiality, integrity, and availability of protected information, potentially exploitable by local attackers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-03021

CVE-2004-0158

DSA-445

Produtos afetados

Lbreakout2

Referências · 13

• 🔥 https://exploit-db.com/exploits/23738 · Exploit
• 🔥 http://securityfocus.com/bid/9712 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15229 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0158 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03021 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0158 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0158 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-445 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-0158 · Aviso do Fabricante
• http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz · Nota
• http://debian.org/security/dsa-445 · Nota
• http://marc.info/?l=bugtraq&m=107755821705356&w=2 · Nota
• https://security-tracker.debian.org/tracker/CVE-2004-0158 · Aviso do Fabricante