Skip to content
OpenAdvisories
Unscored CVE-2006-0045 EUVD-2006-0053GHSA-6465-hj2g-hj5x

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.

Published Jan 20, 2006 · Updated Aug 7, 2024 · Assigned by debian

Package: crawl Ecosystem: Debian

Description

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 crawl 1:4.0.0beta26-7 —
Debian 13 crawl 1:4.0.0beta26-7 —
Debian 12 crawl 1:4.0.0beta26-7 —
Debian 3.1 crawl 1:4.0.0beta26-4sarge0 DSA-949-1
Debian 3.0 crawl 1:4.0.0beta23-2woody2 DSA-949-1

Advisories 1

References