CVE-2002-1192

rogue on NetBSD <= 1.6 and FreeBSD 4.6 - Local Privilege Escalation via Malformed Game Save File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1192. PoCs published by [email protected].

AI-analyzed exploit summary The provided code is a patch for a cross-site scripting (XSS) vulnerability in the 'myng' software, not an exploit for CVE-2002-1192. It shows changes to PHP files to mitigate XSS by applying htmlspecialchars to user-controlled input.

Description

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.

Exploits (1)

exploitdb WRITEUP VERIFIED

by [email protected] · textlocalbsd

https://www.exploit-db.com/exploits/21881

View Code ZIP pw:eip

The provided code is a patch for a cross-site scripting (XSS) vulnerability in the 'myng' software, not an exploit for CVE-2002-1192. It shows changes to PHP files to mitigate XSS by applying htmlspecialchars to user-controlled input.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: myng (version not specified)

No auth needed

Prerequisites: Access to the vulnerable application

MITRE ATT&CK