Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 121605 - games-action/bomberclone: buffer overflow when receiving overly long error packets
Summary: games-action/bomberclone: buffer overflow when receiving overly long error pa...
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Security
Whiteboard: B1 [glsa] DerCorny
Depends on:
Reported: 2006-02-04 16:00 UTC by Stefan Cornelius (RETIRED)
Modified: 2006-02-16 13:43 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Cornelius (RETIRED) gentoo-dev 2006-02-04 16:00:02 UTC
bomberclone segfaults when receiving overly long error packets, possibly allowing remote code execution.
Comment 1 Stefan Cornelius (RETIRED) gentoo-dev 2006-02-04 16:02:12 UTC
games team please bump, plasmaroo was so nice and provided a patch, which can be found here:
Comment 2 SpanKY gentoo-dev 2006-02-04 21:59:17 UTC
has said patch come from upstream ?  gone to upstream ?
Comment 3 Stefan Cornelius (RETIRED) gentoo-dev 2006-02-04 22:12:26 UTC
i think plasmaroo mailed it upstream.
Comment 4 Thierry Carrez (RETIRED) gentoo-dev 2006-02-11 13:45:11 UTC
<plasmaroo> His reply was very sucky along the lines of "kthx, incvs, bye"
* plasmaroo checks WebCVS
<plasmaroo> Nice covert commit... doesn't even say what the patch does... fun.
<plasmaroo> But it has now gone upstream, yes.
Comment 5 Thierry Carrez (RETIRED) gentoo-dev 2006-02-12 10:50:29 UTC
Games team, please apply patch.
Comment 6 SpanKY gentoo-dev 2006-02-12 14:02:51 UTC in portage w/patch
Comment 7 Thierry Carrez (RETIRED) gentoo-dev 2006-02-13 10:39:43 UTC
I suppose this is worth a GLSA ?
Comment 8 SpanKY gentoo-dev 2006-02-13 16:01:31 UTC
remote execution over the network, i'd think so ...
Comment 9 Thierry Carrez (RETIRED) gentoo-dev 2006-02-14 09:55:41 UTC
Let's go then.
Comment 10 Thierry Carrez (RETIRED) gentoo-dev 2006-02-14 09:56:53 UTC
DerCorny: care to forward to ?
Comment 11 Thierry Carrez (RETIRED) gentoo-dev 2006-02-15 12:49:45 UTC
Comment 12 Thierry Carrez (RETIRED) gentoo-dev 2006-02-16 13:43:41 UTC
GLSA 200602-09