Debian Security Advisory

DSA-189-1 luxman -- local root exploit

Date Reported:
06 Nov 2002
Affected Packages:
Security database references:
In Mitre's CVE dictionary: CVE-2002-1245.
More information:

iDEFENSE reported about a vulnerability in LuxMan, a maze game for GNU/Linux, similar to the PacMan arcade game. When successfully exploited a local attacker gains read-write access to the memory, leading to a local root compromise in many ways, examples of which include scanning the file for fragments of the master password file and modifying kernel memory to re-map system calls.

This problem has been fixed in version 0.41-17.1 for the current stable distribution (woody) and in version 0.41-19 for the unstable distribution (sid). The old stable distribution (potato) is not affected since it doesn't contain a luxman package.

We recommend that you upgrade your luxman package immediately.

Fixed in:

Debian GNU/Linux 3.0 (woody)

Intel IA-32:

MD5 checksums of the listed files are available in the original advisory.