From owner-freebsd-security@FreeBSD.ORG Sun Oct 16 08:22:15 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D377316A41F for ; Sun, 16 Oct 2005 08:22:15 +0000 (GMT) (envelope-from smajor@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.201]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4DA8143D48 for ; Sun, 16 Oct 2005 08:22:15 +0000 (GMT) (envelope-from smajor@gmail.com) Received: by zproxy.gmail.com with SMTP id 8so694410nzo for ; Sun, 16 Oct 2005 01:22:14 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:to:cc:subject:date:mime-version:content-type:content-transfer-encoding:x-mailer:in-reply-to:x-mimeole:thread-index:from:message-id; b=jxvxLAqUXfWs0rqc3Wudfwtq/lFvcFSDghuDj4IYxQ4WKME3luySEm/EBUTbML04fFHg/qBikFi4UYQjmk/DLKRP8oA/KEterRKcWZ7YquO1F5+amavG4bRLqqF3ABeROZUtHRoPeHGTb+/2qfBIkXOqFNuqtS4/uNwsNKJRel0= Received: by 10.37.15.26 with SMTP id s26mr970705nzi; Sun, 16 Oct 2005 01:22:14 -0700 (PDT) Received: from p3 ( [67.160.7.98]) by mx.gmail.com with ESMTP id 37sm884953nzf.2005.10.16.01.22.13; Sun, 16 Oct 2005 01:22:14 -0700 (PDT) To: "'Mathieu Arnold'" , "'Kris Kennaway'" Date: Sun, 16 Oct 2005 01:21:13 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.6353 In-Reply-To: <4FB7164D6E6041F49E3BEE97@cc-126-240.int.t-online.fr> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 Thread-Index: AcXSKcMu3XpBNGeqRLmjV49KVsw5SAAAG6fQ From: Stephen Major Message-ID: <43520db6.74a03918.7133.ffffc4ec@mx.gmail.com> Cc: freebsd-security@freebsd.org Subject: RE: GID Games Exploits X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Oct 2005 08:22:15 -0000 Heh, was not familiar with it. I heard there were underground exploits, = I had no idea of the severity so I posted it here to hear feedback, so as = long as there is nothing to worry about cool. -----Original Message----- From: Mathieu Arnold [mailto:mat@mat.cc]=20 Sent: Sunday, October 16, 2005 1:15 AM To: Kris Kennaway; Stephen Major Cc: freebsd-security@freebsd.org Subject: Re: GID Games Exploits +-le 16/10/2005 00:47 -0400, Kris Kennaway =E9crivait : | On Sat, Oct 15, 2005 at 09:39:27PM -0700, Stephen Major wrote: |> It has come to my attention that there are quite a few local exploits |> circling around in the private sector for GID Games. |>=20 |> =20 |>=20 |> Several of the games have vanilla stack overflows in them which can = lead to |> elevation of privileges if successfully exploited. |=20 | Big deal..that's why they're setgid games (which can only write to | game data files) and not setuid anything important :-) It means that I can change my own score to something better, that's very important :-) --=20 Mathieu Arnold