CVE-2003-0612 Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
MediumCVSS 4.6
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| robert hyatt crafty | = 19.3 | No fix listed |
| debian/crafty(Debian:12) | < 19.3-1 | 19.3-1 |
| debian/crafty(Debian:12) | = 14.11-3 | No fix listed |
| debian/crafty(Debian:12) | = 15.20-2 | No fix listed |
| debian/crafty(Debian:12) | = 15.20-2.1 | No fix listed |
| debian/crafty(Debian:12) | = 17.6-1 | No fix listed |
| debian/crafty(Debian:12) | = 17.7-1 | No fix listed |
| debian/crafty(Debian:12) | = 18.12-4 | No fix listed |
| debian/crafty(Debian:13) | < 19.3-1 | 19.3-1 |
| debian/crafty(Debian:13) | = 14.11-3 | No fix listed |
| debian/crafty(Debian:13) | = 15.20-2 | No fix listed |
| debian/crafty(Debian:13) | = 15.20-2.1 | No fix listed |
| debian/crafty(Debian:13) | = 17.6-1 | No fix listed |
| debian/crafty(Debian:13) | = 17.7-1 | No fix listed |
| debian/crafty(Debian:13) | = 18.12-4 | No fix listed |
| debian/crafty(Debian:14) | < 19.3-1 | 19.3-1 |
| debian/crafty(Debian:14) | = 14.11-3 | No fix listed |
| debian/crafty(Debian:14) | = 15.20-2 | No fix listed |
| debian/crafty(Debian:14) | = 15.20-2.1 | No fix listed |
| debian/crafty(Debian:14) | = 17.6-1 | No fix listed |
| debian/crafty(Debian:14) | = 17.7-1 | No fix listed |
| debian/crafty(Debian:14) | = 18.12-4 | No fix listed |
References
- bugs.debian.org
- packages.debian.org
- 9577 third-party-advisory vendor-advisory
- 1009393 vdb-entry
- 1009398 vdb-entry
- 20040315 Crafty Game Stack Overflow & Exploit mailing-list
- 9893 vdb-entry
- crafty-long-argument-bo(13017) vdb-entry
- crafty-command-line-bo(15501) vdb-entry
- Debian Security Tracker CVE-2003-0612 vendor-advisory