PT-2004-1151 · Crafty · Crafty

Steve Kemp · Published 2004-03-10 · Updated 2017-07-11 · CVE-2003-0612

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Crafty version 19.3

Description The issue is related to multiple buffer overflows in the main.c file of Crafty. This allows local users to gain group "games" privileges by providing long command line arguments to crafty.bin.

Recommendations For Crafty version 19.3, consider restricting access to the crafty.bin executable until a patch is available to prevent potential exploitation of the buffer overflows.

Fix

Related Identifiers

CVE-2003-0612

Affected Products

Crafty

References · 13

• http://secunia.com/advisories/9577 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0612 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0612 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0612 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0612 · Vendor Advisory
• http://securityfocus.com/bid/9893 · Note
• http://securityfocus.com/archive/1/357601 · Note
• http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15501 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13017 · Note
• http://securitytracker.com/id?1009393 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541 · Note
• http://securitytracker.com/id?1009398 · Note