Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Golddig | Alexander_siegel | 2.0 (including) | 2.0 (including) |
References
- http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19040
- http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19040