CVE-2004-0158

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Mar 29, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-01597.5Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code CVE-2004-01607.2Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.CVE-2004-01617.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RF CVE-2004-01627.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that u CVE-2004-01635.0Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a den CVE-2004-01645.0KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete CVE-2004-01655.0Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to CVE-2004-01665.0Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."CVE-2004-01677.5DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.CVE-2004-016810.0Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."CVE-2004-01695.0QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests w CVE-2004-01715.0FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buf