FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

wesnoth -- disclosure of .pbl files with lowercase, uppercase, and mixed-case extension

Affected packages
wesnoth < 1.12.4,1

Details

VuXML ID 2a8b7d21-1ecc-11e5-a4a5-002590263bf5
Discovery 2015-06-28
Entry 2015-07-01

Ignacio R. Morelle reports:

As mentioned in the Wesnoth 1.12.4 and Wesnoth 1.13.1 release announcements, a security vulnerability targeting add-on authors was found (bug #23504) which allowed a malicious user to obtain add-on server passphrases from the client's .pbl files and transmit them over the network, or store them in saved game files intended to be shared by the victim. This vulnerability affects all existing releases up to and including versions 1.12.2 and 1.13.0. Additionally, version 1.12.3 included only a partial fix that failed to guard users against attempts to read from .pbl files with an uppercase or mixed-case extension. CVE-2015-5069 and CVE-2015-5070 have been assigned to the vulnerability affecting .pbl files with a lowercase extension, and .pbl files with an uppercase or mixed-case extension, respectively.

References

CVE Name CVE-2015-5069
CVE Name CVE-2015-5070
URL http://forums.wesnoth.org/viewtopic.php?t=42775
URL http://forums.wesnoth.org/viewtopic.php?t=42776