Stay Secure with the Latest Linux Advisories

security advisorygentoobuffer overflow

Gentoo: 230401-16 Important: Severe Nethack Memory Leak Vulnerability

Overflowing a buffer in nethack may lead to privelige escalation to games uid.. - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-08 - --------------------------------------------------------------------- PACKAGE : nethack SUMMARY : buffer overflow DATE : 2003-02-18 09:10 UTC EXPLOIT : local - --------------------------------------------------------------------- Overflowing a buffer in nethack may lead to privelige escalation to games uid. Read the full advisory at: http://marc.theaimsgroup.com/?l=bugtraq&m=104489201032144&w=2 SOLUTION It is recommended that all Gentoo Linux users who are running app-games/nethack upgrade to nethack-3.4.0-r6 as follows: emerge sync emerge -u nethack emerge clean - --------------------------------------------------------------------- This email address is being protected from spambots. You need JavaScript enabled to view it. - GnuPG key is available at - --------------------------------------------------------------------- . A significant flaw in Nethack could permit unauthorized users to exploit game UID on Gentoo deployments. Prompt updates are highly advised.. Gentoo Nethack Exploit Privilege Escalation. . Severity: Important. LinuxSecurity.com Team

Feb 18, 2003 •Important Gentoo