CVE-2006-1390
- State
- Published
- Severity
- Not scored
- Published
- Mar 25, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 24, 2006
Description
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 19376third-party-advisory
- GLSA-200603-23vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=125902
- http://bugs.gentoo.org/show_bug.cgi?id=127167
- http://bugs.gentoo.org/show_bug.cgi?id=127319
- 20060324 Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Localprivilege escalationmailing-list
- gentoo-multiple-games-privilege-escalation(25528)vdb-entry
- 20060324 Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalationmailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=122376
- 24104vdb-entry
- 17217vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.