Secunia

Debian has issued updated packages for freesweep. These fix a vulnerability, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system.

The vulnerability is caused due to a boundary error when processing various environment variables. This can be exploited to cause buffer overflows by constructing overly long, specially crafted environment variables, which may allow execution of arbitrary code with group "games" privileges.

Solution
Updated packages:
Further details available in Customer Area

Provided and/or discovered by
Steve Kemp

Original Advisory
http://www.debian.org/security/2003/dsa-391

Deep Links
Links available in Customer Area