CVE-2005-2810

HIGH 7.2CVE-2005-2810 · Published 07/09/2005 · updated 16/06/2026

In short

CVE-2005-2810 is a HIGH (CVSS 7.2) vulnerability affecting urban (urban).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
urban urban	`≤ 1.5.2`	No fix yet

Description

Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) config.cc, (2) game.cc, (3) highscor.cc, or (4) meny.cc.

References

marc.info
securitytracker.com/id · Patch
freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files · Patch
vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free