CVE-2006-1744

MEDIUM 4.6CVE-2006-1744 · Published 12/04/2006 · updated 16/06/2026

In short

CVE-2006-1744 is a MEDIUM (CVSS 4.6) vulnerability affecting bsdgames (joey hess).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bsdgames joey_hess	`= 2.12= 2.13= 2.14= 2.17= 2.9`	No fix yet

Description

Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call.

References

bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/19687 · Patch
securityreason.com/securityalert/736
debian.org/security/2006/dsa-1036 · Patch
osvdb.org/24634 · Patch
pulltheplug.org/fu
securityfocus.com/bid/17401

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free