Executive brief
A security vulnerability exists in the bdash game on Linux systems. This flaw allows a person who already has basic access to the computer to gain full administrative (root) control. This could lead to a complete takeover of the system, allowing the attacker to access any data or disable the machine.
Technical details
A buffer overflow vulnerability exists in the bdash game on Linux. The flaw is triggered when the application handles input, likely through environment variables or command-line arguments, without proper bounds checking. Because the game may be installed with elevated privileges (such as setuid root), a local attacker can exploit this overflow to execute arbitrary code with root permissions. This is a classic local privilege escalation vulnerability. Users should check for updated packages or remove the setuid bit from the affected binary.
Affected products
- Linux bdash game unknown
Timeline
- 1998-03-01: disclosed