4.6
CVSSv2

CVE-2003-0611

Published: 27/08/2003 Updated: 05/09/2008
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKKAETAMADIR environment variable.

Vulnerable Product Search on Vulmon Subscribe to Product

xtokkaetama xtokkaetama 1.0 b6

Vendor Advisories

Steve Kemp discovered two buffer overflows in xtokkaetama, a puzzle game, when processing the -display command line option and the XTOKKAETAMADIR environment variable These vulnerabilities could be exploited by a local attacker to gain gid 'games' For the current stable distribution (woody) this problem has been fixed in version 10b-6woody1 For ...

Exploits

/* * xtokkaetama 10b local game exploit on Red Hat 90 * Coded by brahma (31/07/2003) * * wwwdebianorg/security/2003/dsa-356 */ #include <stdlibh> #define RETADDR 0xbfffff11 #define DEFAULT_BUFFER_SIZE 29 #define DEFAULT_EGG_SIZE 512 #define NOP 0x90 #define BIN "/usr/X11R6/bin/xtokkaetama" char shellcode[ ...