A local overflow exists in angband, a FreeBSD port. This game fails to check bounds when command line arguments "-u" and "-d" are passed, resulting in a buffer overflow. With a specially crafted request, an attacker can obtain the privileges of setgid games resulting in a loss of integrity.

Upgrade to angband version 2.9.2 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: remove the setgid bit on angband.

• Exploit Database: 19653
• CVE ID: 1999-0826 (see also: NVD)
• ISS X-Force ID: 3723
• Bugtraq ID: 840
• Generic Exploit URL: http://downloads.securityfocus.com/vulnerabilities/exploits/angband-exp.c
• Vendor URL: http://www.freebsd.org
  http://www.thangorodrim.net/
• Mail List Post: http://www.securityfocus.com/archive/1/36889
• Vendor Specific Advisory URL: http://www.thangorodrim.net/development/security.txt

• Brock Tellier - btellierwebley.com -