Xbreaky File Corruption Vulnerability

Bugtraq ID:	5700
Class:	Access Validation Error
CVE:	CVE-2002-1502
Remote:	No
Local:	Yes
Published:	Sep 12 2002 12:00AM
Updated:	Jul 11 2009 05:06PM
Credit:	Discovery of this issue is credited to Marco van Berkum <[email protected]>.
Vulnerable:	xbreaky xbreaky 0.0.4 xbreaky xbreaky 0.0.3
Not Vulnerable:	xbreaky xbreaky 0.0.5

Xbreaky File Corruption Vulnerability

The xbreaky game is prone to symbolic link attacks, which may allow local attackers to corrupt arbitrary system files.

When xbreaky writes to the high score file, it will follow any symbolic links. Since xbreaky is installed setuid root by default, an attacker could create a symbolic link to an arbitrary file and then when the highscore file is written to, the file pointed to by the symbolic link will also be written to.

There may be some possibility of exploiting this condition to elevate privileges, if the attacker causes system files to be corrupted with custom data.

Xbreaky File Corruption Vulnerability

There is no exploit code required.

Xbreaky File Corruption Vulnerability

Solution:
The vendor has addressed this issue in xbreaky 0.0.5.


xbreaky xbreaky 0.0.3

• xbreaky xbreaky 0.0.5
  http://xbreaky.sourceforge.net/download.html

xbreaky xbreaky 0.0.4

• xbreaky xbreaky 0.0.5
  http://xbreaky.sourceforge.net/download.html