CVE-2003-0359

Published: Jul 24, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.

Affected (1)

Products: Stichting Mathematisch Centrum: Nethack

Stichting Mathematisch Centrum

1 product

Nethack

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Stichting Mathematisch Centrum Nethack	Version 3.4.0

References (2)

http://www.debian.org/security/2003/dsa-316

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2003/dsa-316

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.