CVE-2006-1390

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-25 · updated 2026-06-16

Description

The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.

Affected products

gentoo Linux: 0.5, 0.7, 1.1a, 1.2, 1.4, 1.4-rc1 (+2)

References

http://bugs.gentoo.org/show_bug.cgi?id=122376
http://bugs.gentoo.org/show_bug.cgi?id=125902
http://bugs.gentoo.org/show_bug.cgi?id=127167
http://bugs.gentoo.org/show_bug.cgi?id=127319
http://secunia.com/advisories/19376
http://www.gentoo.org/security/en/glsa/glsa-200603-23.xml
http://www.osvdb.org/24104
http://www.securityfocus.com/archive/1/428739/100/0/threaded
http://www.securityfocus.com/archive/1/428743/100/0/threaded
http://www.securityfocus.com/bid/17217
https://exchange.xforce.ibmcloud.com/vulnerabilities/25528
http://bugs.gentoo.org/show_bug.cgi?id=122376

Get alerted when CVE-2006-1390 or the next vulnerability affects your stack