Nessus Plugin #15269

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA432] DSA-432-1 crawl

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2005 Michel Arboi

Summary:

DSA-432-1 crawl

Version:

$Revision: 1.5 $

Cve_id:

CAN-2004-0103

Bugtraq_id:

9566

Xrefs:

DSA:432

Description:

Steve Kemp from the Debian Security Audit Project discovered a problem in
crawl, another console based dungeon exploration game, in the vein of
nethack and rogue. The program uses several environment variables as
inputs but doesn't apply a size check before copying one of them into
a fixed size buffer.
For the stable distribution (woody) this problem has been fixed in
version 4.0.0beta23-2woody1.
For the unstable distribution (sid) this problem has been fixed in
version 4.0.0beta26-4.
We recommend that you upgrade your crawl package.


Solution : http://www.debian.org/security/2004/dsa-432
Risk factor : High