PT-2005-3687 · Urban · Urban

Shaun Colley · Published 2005-09-07 · Updated 2016-10-18 · CVE-2005-2810

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions urban versions prior to 1.5.3

Description The issue is related to multiple stack-based buffer overflows that can be exploited by local users to gain privileges. This can be achieved by setting a long HOME environment variable, which affects various components, including config.cc, game.cc, highscor.cc, and meny.cc.

Recommendations For versions prior to 1.5.3, update to version 1.5.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2810

Affected Products

Urban

References · 5

• http://vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2810 · Security Note
• http://securitytracker.com/id?1014848 · Vendor Advisory
• http://freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files · Patch
• http://marc.info/?l=bugtraq&m=112604855119036&w=2 · Note