BSD-Games Mille Local Save Game File Name Buffer Overrun Vulnerability

Bugtraq ID:	10165
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 17 2004 12:00AM
Updated:	Apr 17 2004 12:00AM
Credit:	Discovery is credited to "narko tix" <[email protected]>.
Vulnerable:	bsd-games bsd-games 2.14 bsd-games bsd-games 2.13 bsd-games bsd-games 2.12 bsd-games bsd-games 2.9
Not Vulnerable:

BSD-Games Mille Local Save Game File Name Buffer Overrun Vulnerability

bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a game.

This game is typically installed setgid games so may allow privileges to be escalated to this level if exploited.

BSD-Games Mille Local Save Game File Name Buffer Overrun Vulnerability

The following exploit was released:

• /data/vulnerabilities/exploits/mille.c

BSD-Games Mille Local Save Game File Name Buffer Overrun Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

BSD-Games Mille Local Save Game File Name Buffer Overrun Vulnerability

References:

• bsd-games Homepage (bsd-games)