CVE-2003-0358

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://nethack.sourceforge.net/v340/bugmore/secpatch.txtPatch, Third Party Advisory
http://www.debian.org/security/2003/dsa-316Third Party Advisory
http://www.debian.org/security/2003/dsa-350Third Party Advisory
http://www.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/6806Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11283Third Party Advisory, VDB Entry
http://nethack.sourceforge.net/v340/bugmore/secpatch.txtPatch, Third Party Advisory
http://www.debian.org/security/2003/dsa-316Third Party Advisory
http://www.debian.org/security/2003/dsa-350Third Party Advisory
http://www.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/6806Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11283Third Party Advisory, VDB Entry

Timeline

Published: Jun 9, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-03594.6nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replaci CVE-2003-03607.5Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.CVE-2003-03617.5gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could al CVE-2003-03625.0Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.CVE-2003-03637.5Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format s CVE-2003-03645.0The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via c CVE-2003-03654.6ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to ga CVE-2003-03665.0lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query.CVE-2003-03672.1znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2003-03685.0Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a CVE-2003-03707.5Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote a CVE-2003-03717.5Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary co