CVE-2003-0358

MediumPublished

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via...

Published: May 30, 2003
Updated: Aug 8, 2024
Assigning CNA: mitre
Evidence observed: Feb 10, 2003

Primary CVSS

4.6/ 10Medium

nvd · CVSS 2.0

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS probability estimate

1.2%

Low · next 30 days

Percentile: 68.1%
Model date: Oct 15, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Sources

CVE-2003-0358PoC
By passing an overly large string when invoking nethack, it is possible to corrupt memory. jnethack and falconseye are also prone to this vulnerability.
CVE-2003-0358Exploit
By passing an overly large string when invoking nethack, it is possible to corrupt memory. jnethack and falconseye are also prone to this vulnerability.
Nethack 3 - Local Buffer Overflow (1)Exploit
tsao@efnet · linux · Feb 10, 2003
Nethack 3 - Local Buffer Overflow (2)Exploit
[email protected] · linux · Feb 10, 2003
Nethack 3 - Local Buffer Overflow (3)Exploit
tsao@efnet · linux · Feb 10, 2003

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.