CVE-2004-0158
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large...
CVE-2004-0158 is a medium vulnerability (CVSS 4.6) in Lgames Lbreakout2, published February 21, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. Fixed in lbreakout2 2.4.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 0.89%EPSS, 59th percentile
- Exploitation
- None known1 public exploit
- Fixed in
2.4lbreakout2 +1 more
Description
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lbreakout2Debian:12 | before 2.4 | 2.4 |
lbreakout2Debian:3.0 | before 2.2.2-1woody1 | 2.2.2-1woody1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities | 2004-02-21 |
What each source reports
NVD Score used 4.6
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
- Record
CVE-2004-0158- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
- Record
CVE-2004-0158- Updated
- 2026-11-02
EUVDEUVD-2004-0158No score
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
- Record
EUVD-2004-0158- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jvqp-w76h-93jfNo score
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large...
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
- Record
GHSA-jvqp-w76h-93jf- Updated
- 2026-11-02
OSVNo score
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
- Record
CVE-2004-0158- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0158No score
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
- Record
DEBIAN-CVE-2004-0158- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
debian.org/security/2004/dsa-445
exchange.xforce.ibmcloud.com/vulnerabilities/15229
marc.info?l=bugtraq&m=107755821705356&w=2
security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz
securityfocus.com/bid/9712
nvd.nist.gov/vuln/detail/CVE-2004-0158
github.com/advisories/GHSA-jvqp-w76h-93jf
security-tracker.debian.org/tracker/CVE-2004-0158