Description
freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the (1) os, (2) io, (3) package, (4) dofile, (5) loadfile, (6) loadlib, (7) module, and (8) require modules or functions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | freeciv | 2.2.1-1 | — |
| Debian 13 | freeciv | 2.2.1-1 | — |
| Debian 12 | freeciv | 2.2.1-1 | — |
References
- [oss-security] 20100624 Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc mailing-list
- MDVSA-2010:205 vendor-advisory
- http://gna.org/bugs/?15624
- [oss-security] 20100610 CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc mailing-list
- 65192 vdb-entry
- http://packetstormsecurity.com/files/163311/Android-2.0-FreeCIV-Arbitrary-Code-Execution.html