CVE-2003-0359: Stichting Mathematisch Centrum Nethack

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.

Affected products

• Stichting Mathematisch Centrum Nethack: version 3.4.0 only

Published 2003-07-24. Last modified 2026-06-16.