CVE-2003-1446
Rogue 5.2-2 - Local Buffer Overflow via HOME Environment Variable
Title source: llmDescription
Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6912
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2003-02/0260.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11382
Scores
EPSS
0.0053
EPSS Percentile
41.1%
Details
CWE
CWE-119
Status
published
Products (2)
rogue/rogue
5.2-2
rogue/rogue
985.0
Published
Dec 31, 2003
Tracked Since
Feb 18, 2026