|
Nethack Local Buffer Overflow Vulnerability
By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting in the execution of arbitrary attacker-supplied code. As nethack may be installed setgid 'games' on various systems this may allow an attacker to gain elevated privileges. slashem, jnethack and falconseye are also prone to this vulnerability. |
|
|
Privacy Statement |
