Some vulnerabilities have been reported in Abuse-SDL, which can be exploited by malicious, local users to overwrite files or gain escalated privileges.

1) Boundary errors in the command line handling can be exploited to cause buffer overflows by passing overly long command line arguments.

2) Some files are created without dropping privileges and can be exploited to create or overwrite arbitrary files on the system.

Successful exploitation requires that the game has been installed setuid or setgid.

Solution
Remove setuid and setgid bits.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Erik Sjölund
2) Steve Kemp

Original Advisory
http://www.debian.org/security/2005/dsa-691

Deep Links
Links available to Secunia VIM customers