PT-2002-2176 · Freebsd+1 · Freebsd+1

Published 2002-10-15 · Updated 2017-07-11 · CVE-2002-1192

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: NetBSD versions 1.6 and earlier FreeBSD version 4.6

Description: The issue is related to multiple buffer overflows in the rogue game, which can be exploited by local users to gain "games" group privileges. This is achieved through the use of malformed entries in a game save file.

Recommendations: For NetBSD versions 1.6 and earlier, consider restricting access to the rogue game until a fix is available. For FreeBSD version 4.6, avoid using the rogue game with untrusted save files until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2002-1192

Affected Products

Freebsd

Netbsd

References · 9

• 🔥 https://exploit-db.com/exploits/21881 · Exploit
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1192 · Security Note
• http://marc.info/?l=bugtraq&m=103342413220529&w=2 · Note
• http://osvdb.org/6098 · Note
• http://secunia.com/advisories/7181 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10261 · Note
• http://secunia.com/advisories/7252 · Note
• http://securityfocus.com/bid/5837 · Note