VulnerabilityModified
CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
MEDIUM 4.6EPSS 0.42%
Does this matter?
Lower severity and a low EPSS score (0.42%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.42% probability · 35th percentile
- CISA KEV
- Not listed
- Affected
- robert hyatt/crafty
- Source
- cve@mitre.org
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541
- http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt
- http://secunia.com/advisories/9577/Vendor Advisory
- http://securitytracker.com/id?1009393
- http://securitytracker.com/id?1009398
- http://www.securityfocus.com/archive/1/357601
- http://www.securityfocus.com/bid/9893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13017
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15501
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541
- http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt
- http://secunia.com/advisories/9577/Vendor Advisory
- http://securitytracker.com/id?1009393
- http://securitytracker.com/id?1009398
- http://www.securityfocus.com/archive/1/357601
- http://www.securityfocus.com/bid/9893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13017
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15501
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.