  golddig 
:  10  2000 . 
:  FREEBSD 
:   
:  5 
:    suid-        . 
 :  golddig 
   FREEBSD, Security Advisory: FreeBSD-SA-00:16.golddig (10.05.2000) 
http://www.security.nnov.ru/news135.html


golddig X11 Game Arbitrary File Overwrite Vulnerability

Bugtraq ID:  1184  
Class:  Access Validation Error  
CVE:  CVE-2000-0387  
Remote:  No  
Local:  Yes  
Published:  May 09 2000 12:00AM  
Updated:  May 09 2000 12:00AM  
Credit:  This vulnerability was published in a FreeBSD security advisory on May 9, 2000  
Vulnerable:  Alexander Siegel golddig 2.0 
- FreeBSD FreeBSD 3.0 
- FreeBSD FreeBSD 3.1 
- FreeBSD FreeBSD 3.2 
- FreeBSD FreeBSD 3.3 
- FreeBSD FreeBSD 3.4 
- FreeBSD FreeBSD 4.0 
- FreeBSD FreeBSD 5.0 
 
 
Not Vulnerable:


golddig X11 Game Arbitrary File Overwrite Vulnerability

A vulnerability exists in the golddig2 game, by Alexander Siegel. It was discovered during a security audit of the golddig2 package by the FreeBSD ports team, that the makelev program can be used to overwrite arbitrary files, as it is by default installed setuid root. The contents of the file is not arbitrary, however, so it is not immediately clear whether this program could be used to elevate privilege. That the makelev program being setuid is a potential security problem is documented in the original Makefile for golddig.
While this vulnerability exists in the ports package for FreeBSD 3, 4 and 5-current, it is not a FreeBSD vulnerability. Packages in the ports collection are not installed by default, and are provided as is.


golddig X11 Game Arbitrary File Overwrite Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.


golddig X11 Game Arbitrary File Overwrite Vulnerability

Solution:
Updated ports packages have been issued by FreeBSD. Users seeking to fix golddig on platforms other than FreeBSD should simply remove the setuid bit.




http://www.securityfocus.com/bid/1184