Summary
The remote host is missing an update to purity
announced via advisory DSA 166-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20166-1
Insight
Two buffer overflows have been discovered in purity, a game for nerds and hackers, which is installed setgid games on a Debian system. This problem could be exploited to gain unauthorized access to the group games. A malicious user could alter the highscore of several games.
This problem has been fixed in version 1-14.2 for the current stable distribution (woody), in version 1-9.1 for the old stable distribution (potato) and in version 1-16 for the unstable distribution (sid).
We recommend that you upgrade your purity packages.
Severity
Classification
-
CVE CVE-2002-1124 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities