The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

http://forums.wesnoth.org/viewtopic.php?t=41872

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

US-CERT/NIST reports :

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

Ignacio R. Morelle discovered that missing path restrictions in the 'Battle of Wesnoth' game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded.

For the oldstable distribution (distribution), this problem has been fixed in version 1:1.8.5-1+deb6u1. See DSA-3218-1 for the versions of the other releases.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Ignacio R. Morelle discovered that missing path restrictions in the'Battle of Wesnoth' game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded.

ID	Name	Product	Family	Severity
83069	Fedora 21 : wesnoth-1.12.2-1.fc21 (2015-6295)	Nessus	Fedora Local Security Checks	medium
83068	Fedora 20 : wesnoth-1.12.2-1.fc20 (2015-6280)	Nessus	Fedora Local Security Checks	medium
82977	Fedora 22 : wesnoth-1.12.2-1.fc22 (2015-6108)	Nessus	Fedora Local Security Checks	medium
82891	FreeBSD : Wesnoth -- Remote information disclosure (ba326a36-5f02-452d-a215-31e7b06d5edf)	Nessus	FreeBSD Local Security Checks	medium
82860	Debian DLA-202-1 : wesnoth-1.8 security update	Nessus	Debian Local Security Checks	medium
82719	Debian DSA-3218-1 : wesnoth-1.10 - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2015-0844

high

Tenable Plugins

medium

medium

medium

medium

medium

medium