CVE-2004-1076 Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
HighCVSS 7.2
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atari800 | = 0.5.4 | No fix listed |
| atari800 | = 0.6 | No fix listed |
| atari800 | = 0.6.2 | No fix listed |
| atari800 | = 0.7 | No fix listed |
| atari800 | = 0.8.1 | No fix listed |
| atari800 | = 0.8.2 | No fix listed |
| atari800 | = 0.8.6 | No fix listed |
| atari800 | = 0.8.7 | No fix listed |
| atari800 | = 0.8.8 | No fix listed |
| atari800 | = 0.8.9 | No fix listed |
| atari800 | = 0.9 | No fix listed |
| atari800 | = 0.9.1 | No fix listed |
| atari800 | = 0.9.2 | No fix listed |
| atari800 | = 0.9.3 | No fix listed |
| atari800 | = 0.9.4 | No fix listed |
| atari800 | = 0.9.5 | No fix listed |
| atari800 | = 0.9.6 | No fix listed |
| atari800 | = 0.9.7 | No fix listed |
| atari800 | = 0.9.8 | No fix listed |
| atari800 | = 0.9.9 | No fix listed |
| atari800 | = 0.9.9a | No fix listed |
| atari800 | = 0.9.9b | No fix listed |
| atari800 | = 0.9.9c | No fix listed |
| atari800 | = 0.9.9d | No fix listed |
| atari800 | = 0.9.9e | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| atari800 | = 0.9.9f | No fix listed |
| atari800 | = 0.9.9g | No fix listed |
| atari800 | = 0.9.9h | No fix listed |
| atari800 | = 0.9.9i | No fix listed |
| atari800 | = 0.9.9j | No fix listed |
| atari800 | = 1.0 | No fix listed |
| atari800 | = 1.0.1 | No fix listed |
| atari800 | = 1.0.2 | No fix listed |
| atari800 | = 1.0.3 | No fix listed |
| atari800 | = 1.0.4 | No fix listed |
| atari800 | = 1.0.5 | No fix listed |
| atari800 | = 1.0.6 | No fix listed |
| atari800 | = 1.0.7 | No fix listed |
| atari800 | = 1.2 | No fix listed |
| atari800 | = 1.2.1 | No fix listed |
| atari800 | = 1.2.1_pre0 | No fix listed |
| atari800 | = 1.2.2 | No fix listed |
| atari800 | = 1.2.3 | No fix listed |
| atari800 | = 1.2.4 | No fix listed |
| atari800 | = 1.2.5 | No fix listed |
| atari800 | = 1.2_pre0 | No fix listed |
| atari800 | = 1.3 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian/atari800(Debian:12) | < 1.3.2-1 | 1.3.2-1 |
| debian/atari800(Debian:12) | = 0.6.2-1 | No fix listed |
| debian/atari800(Debian:12) | = 0.8.6-2 | No fix listed |
| debian/atari800(Debian:12) | = 0.9.8a-2 | No fix listed |
| debian/atari800(Debian:12) | = 1.2.2-1woody3 | No fix listed |
| debian/atari800(Debian:13) | < 1.3.2-1 | 1.3.2-1 |
| debian/atari800(Debian:13) | = 0.6.2-1 | No fix listed |
| debian/atari800(Debian:13) | = 0.8.6-2 | No fix listed |
| debian/atari800(Debian:13) | = 0.9.8a-2 | No fix listed |
| debian/atari800(Debian:13) | = 1.2.2-1woody3 | No fix listed |
| debian/atari800(Debian:14) | < 1.3.2-1 | 1.3.2-1 |
| debian/atari800(Debian:14) | = 0.6.2-1 | No fix listed |
| debian/atari800(Debian:14) | = 0.8.6-2 | No fix listed |
| debian/atari800(Debian:14) | = 0.9.8a-2 | No fix listed |
| debian/atari800(Debian:14) | = 1.2.2-1woody3 | No fix listed |
References
- cvs.sourceforge.net
- 20041125 Atari800 - local root. mailing-list
- 20041126 Re: Atari800 - local root. (fwd) mailing-list
- 13670 third-party-advisory
- DSA-609 vendor-advisory
- 12610 vdb-entry
- 11756 exploit patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2004-1076 vendor-advisory