Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

xconq: buffer overflows

Package(s):

xconq

CVE #(s):

CAN-2003-0607

Created:

July 31, 2003

Updated:

August 5, 2003

Description:

Steve Kemp discovered a buffer overflow in xconq, in processing the USER environment variable. In the process of fixing this bug, a similar problem was discovered with the DISPLAY environment variable. This vulnerability could be exploited by a local attacker to gain gid 'games'.

Alerts:

Debian

DSA-354-1

2003-07-29

(Log in to post comments)