CVE-2003-0358: Debian Linux

Medium severity, CVSS 4.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Affected products

• Debian Debian Linux: version 2.2 only; version 3.0 only
• Falconseye Project Falconseye: up to and including 1.9.3
• Nethack Nethack: up to and including 3.4.0

Published 2003-06-09. Last modified 2026-06-16.