Wesnoth CVE-2015-0844 File Disclosure Vulnerability

Bugtraq ID:	74047
Class:	Input Validation Error
CVE:	CVE-2015-0844
Remote:	Yes
Local:	No
Published:	Apr 13 2015 12:00AM
Updated:	Apr 13 2015 12:00AM
Credit:	Ignacio R. Morelle
Vulnerable:	Wesnoth Wesnoth 1.12.1 Wesnoth Wesnoth 1.12 Wesnoth Wesnoth 1.11.19 Wesnoth Wesnoth 1.11.14 Wesnoth Wesnoth 1.11.13 Wesnoth Wesnoth 1.11.12 Wesnoth Wesnoth 1.11.11 Wesnoth Wesnoth 1.11.10 Wesnoth Wesnoth 1.11.9 Wesnoth Wesnoth 1.11.8 Wesnoth Wesnoth 1.11.7 Wesnoth Wesnoth 1.11.6 Wesnoth Wesnoth 1.11.5 Wesnoth Wesnoth 1.11.4 Wesnoth Wesnoth 1.11.3 Wesnoth Wesnoth 1.11.2 Wesnoth Wesnoth 1.11.1 Wesnoth Wesnoth 1.11 Wesnoth Wesnoth 1.10 Wesnoth Wesnoth 1.9 Wesnoth Wesnoth 1.8 Wesnoth Wesnoth 1.7 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Wesnoth Wesnoth 1.12.2

Wesnoth CVE-2015-0844 File Disclosure Vulnerability

Wesnoth is prone to a file-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to gain access to sensitive information stored in arbitrary files, that may aid in further attacks.

Wesnoth CVE-2015-0844 File Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Wesnoth CVE-2015-0844 File Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wesnoth CVE-2015-0844 File Disclosure Vulnerability

References:

• [IMPORTANT] Security advisory for Wesnoth 1.7.x�??1.12.x (Wesnoth)
  
• Wesnoth Homepage (Wesnoth)