Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

OpenSUSE: 202303-11 Security: Chess-gtk Privilege Escalation Risk

gentoo
Calendar Grey March 29, 2006
Scroller Gentoo
Explore the Gentoo GLSA 200603-26 notice concerning tetris-bsd's local privilege elevation vulnerabilities and address them proficiently.
tetris-bsd is prone to local privilege escalation vulnerabilities.

Summary

Gentoo Linux Security Advisory GLSA 200603-26 https://security.gentoo.org/ Severity: Normal Title: bsd-games: Local privilege escalation in tetris-bsd Date: March 29, 2006 Bugs: #122399 ID: 200603-26

Synopsis ======= tetris-bsd is prone to local privilege escalation vulnerabilities.
Background ========= bsd-games is a collection of NetBSD games ported to Linux.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 games-misc/bsd-games < 2.17-r1 >= 2.17-r1
========== Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that the checkscores() function in scores.c reads in the data from the /var/games/tetris-bsd.scores file without validation, renderin...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround