Lucene search

K
cveDebianCVE-2006-0045
HistoryJan 20, 2006 - 9:03 p.m.

CVE-2006-0045

2006-01-2021:03:00
debian
web.nvd.nist.gov
28
cve-2006-0045
crawl
game save
game load
local privilege escalation
security vulnerability
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

25.6%

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.

Affected configurations

Nvd
Node
linley_henzelldungeon_crawlMatch4.0.0_b23
VendorProductVersionCPE
linley_henzelldungeon_crawl4.0.0_b23cpe:2.3:a:linley_henzell:dungeon_crawl:4.0.0_b23:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

25.6%