PT-2004-1021 · Unknown · Lbreakout2

Published 2004-03-10 · Updated 2017-07-11 · CVE-2004-0158

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions lbreakout2 (affected versions not specified)

Description The issue concerns a buffer overflow in lbreakout2, allowing local users to gain 'games' group privileges. This can be achieved by setting a large HOME environment variable, affecting various components such as editor.c, theme.c, manager.c, config.c, game.c, levels.c, or main.c. Additionally, there are multiple vulnerabilities in the lbreakout2 package that can lead to breaches of confidentiality, integrity, and availability of protected information, potentially exploitable by local attackers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-03021

CVE-2004-0158

DSA-445

Affected Products

Lbreakout2

References · 13

• 🔥 https://exploit-db.com/exploits/23738 · Exploit
• 🔥 http://securityfocus.com/bid/9712 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0158 · Security Note
• https://bdu.fstec.ru/vul/2015-03021 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0158 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0158 · Vendor Advisory
• http://debian.org/security/2004/dsa-445 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0158 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0158 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15229 · Note
• http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz · Note
• http://debian.org/security/dsa-445 · Note
• http://marc.info/?l=bugtraq&m=107755821705356&w=2 · Note