Re: [SECURITY] [DSA 189-1] New luxman packages fix local root exploit

[Andrew Shugg <andrew@neep.com.au>]

Kaare Olsen said:
> > iDEFENSE reported about a vulnerability in LuxMan, a maze game for
> > GNU/Linux, similar to the PacMan arcade game.  When successfully
> > exploited it a local attacker with read write access to the Memory,
> > leading to a local root compromise in many ways, examples of which
> > include scanning the file for fragments of the master password file
> > and modifying kernel memory to re-map system calls.
> 
> While trying to translate this DSA, I got stuck at this sentence: "When
> successfully exploited it a local attacker with read write access to the
> Memory" - it doesn't make sense, should "with" be replaced with "gains"?

Yeah, that doesn't seem to make any sense at all ...

However if you check the web version of the security advisory, it has
been fixed.

  http://www.debian.org/security/2002/dsa-189

Andrew.

-- 
Andrew Shugg <andrew@neep.com.au>                   http://www.neep.com.au/

"Just remember, Mr Fawlty, there's always someone worse off than yourself."
"Is there?  Well I'd like to meet him.  I could do with a good laugh."