Multiple Unix flavors that install the 'empire' game contain a flaw that may allow a local user to gain privileges. The issue is due to the program not dropping SGID privileges when invoking commands. This can be used to execute a sub-process with the same privileges as the game, allowing any command to be run with the same group ID.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
Solution
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: remove the SUID bit from the program.
We currently have no CVSS2 data on this vulnerability. Feel free to suggest it.
Blogs
This product uses the Daylife API but is not endorsed or certified by Daylife.
This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.