Unscored severity · published Mar 25, 2006
CVE-2006-1390
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to…
–
CVSS
0.7%
EPSS
No
On KEV
Description
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Gentoo
0.5; 0.7; 1.1a; 1.2; 1.4; 1.4; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1390
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1390
Exploit
http://bugs.gentoo.org/show_bug.cgi?id=122376
Exploit
http://bugs.gentoo.org/show_bug.cgi?id=125902
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=127167
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=127319
Vendor Advisory
http://secunia.com/advisories/19376
Patch
http://www.gentoo.org/security/en/glsa/glsa-200603-23.xml
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync