CVE-2006-1744

Published: Apr 12, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call.

Affected (5)

Products: Joey Hess: Bsdgames

Joey Hess

1 product

Bsdgames

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Joey Hess Bsdgames	Version 2.12
Joey Hess Bsdgames	Version 2.13
Joey Hess Bsdgames	Version 2.14
Joey Hess Bsdgames	Version 2.17
Joey Hess Bsdgames	Version 2.9

References (14)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989

Source: cve@mitre.org

http://secunia.com/advisories/19687

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/736

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1036

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/24634

Source: cve@mitre.org

Patch

http://www.pulltheplug.org/fu/?q=node/56

Source: cve@mitre.org

http://www.securityfocus.com/bid/17401

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989