Description
Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) XAPPLRESLANGPATH or (2) XAPPLRESDIR environment variable, or (3) command line argument.
References
- 20050501 DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite' mailing-list
- 1013855 vdb-entry
- 15197 third-party-advisory
- http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt