LWN.net Logo

BomberClone: remote execution of arbitrary code

Package(s):bomberclone CVE #(s):CVE-2006-0460
Created:February 17, 2006 Updated:March 14, 2006
Description: Stefan Cornelius of the Gentoo Security team discovered multiple missing buffer checks in BomberClone's code. By sending overly long error messages to the game via network, a remote attacker may exploit buffer overflows to execute arbitrary code with the rights of the user running BomberClone.
Alerts:
Debian DSA-997-1 2006-03-13
Gentoo 200602-09 2006-02-16

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds