Vulnerability in Stichting Mathematisch Centrum Nethack

CVE-2003-0359

nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.

EPSS: 0.003 (24.5th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)