[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[Bug 187353] Possible security issue

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Possible security issue
Alias: CVE-2006-1390


------- Additional Comments From j w r degoede hhs nl  2008-04-04 07:30 EST -------
>From me (repeating myself from comment #3):

Although users are not in the games group on Fedora this is still a problem,
this hole allows the following scenario:
- find a sgid game which is exploitable to get games gid rights
- use the games gid rights to drop a crafted file which will
  exploit nethack when opened by nethack.
- once another users runs nethack and opens the crafted file
  unwanted things get done with the rights of the other user.

So although low priority this needs fixing never the less.

Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]