A local overflow exists in angband, a FreeBSD port. This game fails to check bounds when command line arguments "-u" and "-d" are passed, resulting in a buffer overflow. With a specially crafted request, an attacker can obtain the privileges of setgid games resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
Solution
Upgrade to angband version 2.9.2 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: remove the setgid bit on angband.
webley.com -