CVE-2006-1744: Joey Hess Bsdgames

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call.

Affected products

• Joey Hess Bsdgames: version 2.9 only; version 2.12 only; version 2.13 only; version 2.14 only; version 2.17 only

Published 2006-04-12. Last modified 2026-06-16.