GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Tue Feb 27, 2007 12:26 pm Post subject: [ GLSA 200702-10 ] UFO2000: Multiple vulnerabilities |
|
|
Gentoo Linux Security Advisory
Title: UFO2000: Multiple vulnerabilities (GLSA 200702-10)
Severity: normal
Exploitable: remote
Date: February 25, 2007
Bug(s): #142392
ID: 200702-10
Synopsis
Multiple vulnerabilities have been found in the network components of
UFO2000 that could result in the remote execution of arbitrary code.
Background
UFO2000 is a multi-player, turn-based tactical simulation.
Affected Packages
Package: games-strategy/ufo2000
Vulnerable: < 0.7.1062
Unaffected: >= 0.7.1062
Architectures: All supported architectures
Description
Five vulnerabilities were found: a buffer overflow in recv_add_unit();
a problem with improperly trusting user-supplied string information in
decode_stringmap(); several issues with array manipulation via various
commands during play; an SQL injection in server_protocol.cpp; and
finally, a second buffer overflow in recv_map_data().
Impact
An attacker could send crafted network traffic as part of a
multi-player game that could result in remote code execution on the
remote opponent or the server. A remote attacker could also run
arbitrary SQL queries against the server account database, and perform
a Denial of Service on a remote opponent by causing the game to crash.
Workaround
There is no known workaround at this time.
Resolution
UFO2000 currently depends on the dumb-0.9.2 library, which has been
removed from portage due to security problems (GLSA 200608-14) .
Because of this, UFO2000 has been masked, and we recommend unmerging
the package until the next beta release can remove the dependency on
dumb.
Code: | # emerge --ask --verbose --unmerge ufo2000 |
References
CVE-2006-3788
CVE-2006-3789
CVE-2006-3790
CVE-2006-3791
CVE-2006-3792
GLSA 200608-14
Last edited by GLSA on Mon Jun 10, 2013 4:24 am; edited 3 times in total |
|