PT-2004-1151 · Crafty · Crafty

Steve Kemp · Publicado 2004-03-10 · Atualizado 2017-07-11 · CVE-2003-0612

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Crafty version 19.3

Description The issue is related to multiple buffer overflows in the main.c file of Crafty. This allows local users to gain group "games" privileges by providing long command line arguments to crafty.bin.

Recommendations For Crafty version 19.3, consider restricting access to the crafty.bin executable until a patch is available to prevent potential exploitation of the buffer overflows.

Correção

Identificadores relacionados

CVE-2003-0612

Produtos afetados

Crafty

Referências · 13

• http://secunia.com/advisories/9577 · Aviso do Fabricante
• http://securityfocus.com/bid/9893 · Nota
• https://security-tracker.debian.org/tracker/CVE-2003-0612 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2003-0612 · Aviso do Fabricante
• http://securityfocus.com/archive/1/357601 · Nota
• http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0612 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15501 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0612 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13017 · Nota
• http://securitytracker.com/id?1009393 · Nota
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541 · Nota
• http://securitytracker.com/id?1009398 · Nota