id NetBSD-UP2006-0002 date 2006-08-10 class security priority medium title sail(6), dm(8) and tetris(6) buffer overflows brief The sail, dungeon master arbiter and tetris games all contain buffer overflows. These programs are installed sgid games, and when successfully exploited the vulnerabilities may allow an attacker to elevate their privileges to the games group. references type NetBSD security advisory data NetBSD-SA2006-018 type CVE reference for sail(6) data CVE-2006-1744 type CVE reference for tetris(6) data CVE-2006-1539 affected branch head archs arch all files file src/games/dm/dm.c revision 1.23 file src/games/sail/pl_main.c revision 1.17 file src/games/tetris/scores.c revision 1.14 branch netbsd-3 archs arch all files file src/games/dm/dm.c revision 1.21.2.1 file src/games/sail/pl_main.c revision 1.16.6.1 file src/games/tetris/scores.c revision 1.13.6.1 branch netbsd-2 archs arch all files file src/games/dm/dm.c revision 1.20.4.1 file src/games/sail/pl_main.c revision 1.16.4.1 file src/games/tetris/scores.c revision 1.13.4.1