Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

crawl: insecure program execution

Package(s):

crawl

CVE #(s):

Created:

January 23, 2006

Updated:

January 25, 2006

Description:

Steve Kemp from the Debian Security Audit project discovered a security related problem in crawl, another console based dungeon exploration game in the vein of nethack and rogue. The program executes commands insecurely when saving or loading games which can allow local attackers to gain group games privileges.

Alerts:

Debian

DSA-949-1

2006-01-20

(Log in to post comments)