medium4.6Public exploit code
CVE-2003-0358
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nethack 3 - Local Buffer Overflow (3)2003-02-10 · local · linux · Verified
- Nethack 3 - Local Buffer Overflow (2)2003-02-10 · local · linux · Verified
- Nethack 3 - Local Buffer Overflow (1)2003-02-10 · local · linux · Verified
Impact
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Falconseye Project | Falconseye | through 1.9.3 |
| Nethack | Nethack | through 3.4.0 |
| Debian | Debian Linux | Versions 2.2, 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://nethack.sourceforge.net/v340/bugmore/secpatch.txt
- http://www.debian.org/security/2003/dsa-316
- http://www.debian.org/security/2003/dsa-350
- http://www.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0
- http://www.securityfocus.com/bid/6806
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11283
- http://nethack.sourceforge.net/v340/bugmore/secpatch.txt
- http://www.debian.org/security/2003/dsa-316
- http://www.debian.org/security/2003/dsa-350
- http://www.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0
- http://www.securityfocus.com/bid/6806
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11283