|
Brought to you by:
Suppliers of:
|
|
|
| |
| ZetaLABs (Zone-H Research Laboratories) has discovered a buffer overflow in the game Liquidwar, an application contained in the Debian GNU/Linux distribution. |
| |
Credit:
The information has been provided by Astharot.
|
| |
Vulnerable systems:
* Liquidwar version 5.4.5
We can see the vulnerable code here:
#define STARTUP_MAX_PATH_LENGTH 1000
[...]
char STARTUP_CFG_PATH[STARTUP_MAX_PATH_LENGTH];
[...]
static void set_path (void)
{
char home_path[512];
char *home_env;
if (exist_argument_value (IDENT_CFG))
strcpy(STARTUP_CFG_PATH,get_argument_str (IDENT_CFG));
else
{
#ifdef ALLEGRO_UNIX
home_env=getenv("HOME");
strcpy(home_path,home_env); /* unchecked strcpy() */
strcat(home_path,"/");
#else
home_env="";
strcpy(home_path,home_env); /* unchecked strcpy() but not dangerous */
#endif
strcpy(STARTUP_CFG_PATH,home_path); /* unchecked strcpy() */
strcat(STARTUP_CFG_PATH,DEFAULT_CFG_PATH);
}
This vulnerability can be exploited by a local attacker to execute arbitrary code with gid=games privileges.
Solution:
It's possible to download a simple patch here: http://www.zone-h.org/download/file=4943.
|
|
|
|
|
