Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).
Max CVSS
4.9
EPSS Score
0.04%
Published
2003-12-31
Updated
2017-07-29
Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.
Max CVSS
4.6
EPSS Score
0.04%
Published
2002-10-28
Updated
2017-07-11
2 vulnerabilities found