CVE-2004-0158

Lgames Lbreakout2 - Buffer Overflow

Title source: rule

Description

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Li0n7 · clocallinux

https://www.exploit-db.com/exploits/23738

View Code ZIP pw:eip

References (5)

[Patch, Vendor Advisory] http://www.debian.org/security/2004/dsa-445

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/15229

[Mailing List] http://marc.info/?l=bugtraq&m=107755821705356&w=2

[Various Sources] http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/9712

Scores

EPSS 0.0050

EPSS Percentile 66.1%

Details

Status published

Products (8)

lgames/lbreakout2 2.0

lgames/lbreakout2 2.0.1

lgames/lbreakout2 2.1

lgames/lbreakout2 2.1.1

lgames/lbreakout2 2.1.2

lgames/lbreakout2 2.2

lgames/lbreakout2 2.2.1

lgames/lbreakout2 2.2.2

Published Mar 29, 2004

Tracked Since Feb 18, 2026