20030509 ltris-and-slashem-tty possible troublemailing list
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html CVE-2003-1473
Lgames LTris 1.0.1 - Local Memory Corruption
Record summary
CVE-2003-1473 has a selected CVSS score of 4.6; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBLgames LTris 1.0.1 - Local Memory CorruptionExploitDB exploitby Knud Erik HojgaardNot analyzed1 file
References
520030508 ltris-and-slashem-tty possible troublemailing list
http://www.securityfocus.com/archive/1/321001 7537vdb entry
http://www.securityfocus.com/bid/7537 ltris-bo(11978)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11978 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1473