CVE-2006-0045 : crawl before 4.0.0 does not securely call programs when saving and loading games

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.

Published 2006-01-20 21:03:00

Updated 2017-07-20 01:29:27

Source Debian GNU/Linux

View at NVD, CVE.org

Products affected by CVE-2006-0045

Linley Henzell » Dungeon Crawl » Version: 4.0.0 B23
cpe:2.3:a:linley_henzell:dungeon_crawl:4.0.0_b23:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 5 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

http://www.securityfocus.com/bid/16337
https://exchange.xforce.ibmcloud.com/vulnerabilities/24262

Linley`s Dungeon Crawl insecure command execution when saving or loading games CVE-2006-0045 Vulnerability Report
http://www.vupen.com/english/advisories/2006/0303

Site en construction
http://www.debian.org/security/2006/dsa-949

[SECURITY] [DSA 949-1] New crawl packages fix potential group games execution
Patch;Vendor Advisory

Jump to