Arbitrary Code Execution Vulnerability in Freeciv Software by Freeciv Team
CVE-2010-2445

Currently unrated

Key Information:

Vendor

Freeciv

Status
Freeciv
Vendor
CVE Published:
8 July 2010

What is CVE-2010-2445?

The vulnerability in Freeciv software allows malicious entities to exploit specific Lua-related functionalities. Attackers may gain unauthorized access to read arbitrary files or execute arbitrary commands through malicious scenarios. The compromise arises from various Lua modules like os, io, package, and several functions including dofile and require. Affected versions include Freeciv 2.2 prior to 2.2.1 and Freeciv 2.3 prior to 2.3.0, highlighting serious risks to the system integrity and data security.

References

http://www.openwall.com/lists/oss-security/2010/06/24/5
mailing-listx_refsource_MLIST
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://gna.org/bugs/?15624
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.