[6308] in bugtraq
No subject found in mail header
daemon@ATHENA.MIT.EDU (bst@INAME.COM)
Mon Mar 16 11:58:25 1998
Date: Mon, 16 Mar 1998 10:18:24 -0400
Reply-To: bst@INAME.COM
From: bst@INAME.COM
To: BUGTRAQ@NETSPACE.ORG
More buggy soft (check your systems):
* Conquest Game (Multi-player, curses based, space warfare game.)
ftp://sunsite.unc.edu/pub/Linux/games/strategy/
(the location has been changed, check it)
The program is installed [2771] gid = conquest.
There are so many potential overflow conditions in the code, here is one as an
example:
char conf_name[256];
char *homevar;
...
if ((homevar = getenv("HOME")) == NULL)
{
clog("GetConf(): getenv(HOME) failed");
fprintf(stderr, "Can't get HOME environment variable. Exiting\n");
return(ERR);
}
sprintf(conf_name, "%s/%s", homevar, CONFIG_FILE);
* LinCity Game (LinCity is an SVGALIB and X based city/country simulation game
for Linux, Solaris 2.5, FreeBSD, HP_UX, AIX and IRIX are ALPHA
at this time, but have. been reported to work - sometimes
needing a tweak to the Makefile[s].)
ftp://sunsite.unc.edu/pub/Linux/games/strategy
ZzZZz:
char s[100];
...
strcpy(s,getenv("HOME"));
Good luck!
