Unscored severity · published Jan 20, 2006
CVE-2006-0045
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges
–
CVSS
0.3%
EPSS
No
On KEV
Description
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Dungeon Crawl · Linley Henzell
4.0.0_b23 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0045
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0045
Vendor Advisory
http://secunia.com/advisories/18545
secunia.com
http://secunia.com/advisories/18573
Patch
http://www.debian.org/security/2006/dsa-949
www.osvdb.org
http://www.osvdb.org/22690
www.securityfocus.com
http://www.securityfocus.com/bid/16337
www.vupen.com
http://www.vupen.com/english/advisories/2006/0303
