Published: 12/11/2002 Updated: 18/10/2016

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.

Vulnerable Product	Search on Vulmon	Subscribe to Product
frank mcingvale luxman 0.41

iDEFENSE reported about a vulnerability in LuxMan, a maze game for GNU/Linux, similar to the PacMan arcade game When successfully exploited a local attacker gains read-write access to the memory, leading to a local root compromise in many ways, examples of which include scanning the file for fragments of the master password file and modifying kern ...

NVD-CWE-Other http://www.idefense.com/advisory/11.06.02.txt http://www.debian.org/security/2002/dsa-189 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html http://www.iss.net/security_center/static/10549.php http://www.securityfocus.com/bid/6113 http://marc.info/?l=bugtraq&m=103660334009855&w=2 https://nvd.nist.gov https://www.debian.org/security/./dsa-189

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1245

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect