|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200603-26] bsd-games: Local privilege escalation in tetris-bsd Vulnerability Assessment Details
|
[GLSA-200603-26] bsd-games: Local privilege escalation in tetris-bsd |
||
bsd-games: Local privilege escalation in tetris-bsd Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200603-26 (bsd-games: Local privilege escalation in tetris-bsd) Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that the checkscores() function in scores.c reads in the data from the /var/games/tetris-bsd.scores file without validation, rendering it vulnerable to buffer overflows and incompatible with the system used for managing games on Gentoo Linux. As a result, it cannot be played securely on systems with multiple users. Please note that this is probably a Gentoo-specific issue. Impact A local user who is a member of group "games" may be able to modify the tetris-bsd.scores file to trigger the execution of arbitrary code with the rights of other players. Workaround Do not add untrusted users to the "games" group. Solution: All bsd-games users are advised to update to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=games-misc/bsd-games-2.17-r1" Network Security Threat Level: Medium Networks Security ID: Vulnerability Assessment Copyright: (C) 2006 Michel Arboi |
||
Cables, Connectors |
DELL PowerEdge R730XD 24x 2.5" Server Dual 750W Dual Heatsink - BareBones TESTED
$299.99
Dell PowerEdge R620 Server 2x E5-2660 v1 2.2GHz 16 Cores 256GB RAM 2x 300GB HDD
$89.99
Dell R630 Server 2x E5-2620 V4 2.1GHz =16 Cores 128GB DDR4 1x 960GB 2x 1G 2x 10G
$210.00
Dell PowerEdge R730XD 28 Core Server 2X Xeon E5-2680 V4 H730 128GB RAM No HDD
$389.99
Dell PowerEdge R720XD Xeon E5-2680 V2 2.8GHz 20 Cores 256GB RAM 12x4TB
$510.00
Dell PowerEdge R720 Server - 2x8c CPU,256Gb RAM, 128Gb SSD/3x900Gb SAS, Proxmox
$340.00
Dell PowerEdge R720 Server 2x E5-2670 v2 2.5GHz 20-Core 128GB H710p Mini 8x 2.5
$180.54
Dell PowerEdge R630 Server | 2x E5-2680 V4 =28 Cores | H730 | Choose RAM/ Drives
$336.99
Dell PowerEdge R430 3.5 1U 2x E5-2666 v3 2.9ghz 20-Cores 128gb 4x Trays 2x 550w
$364.99
DELL PowerEdge R630 8SFF Server 2x E5-2699v3 2.3GHz =36 Cores 64GB H730 4xRJ45
$350.00
|
||
No Discussions have been posted on this vulnerability. |