Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| netbsd | netbsd | 1.5.2 |
| netbsd | netbsd | 1.6 |
| netbsd | netbsd | 1.5.1 |
| netbsd | netbsd | 1.5.3 |
| netbsd | netbsd | 1.5 |
| rogue | rogue | 5.3 |
Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-119,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| rogue | rogue | 985.0 |
| rogue | rogue | 5.2-2 |