Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2003-0359

nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.

PublishedJul 24, 2003, 04:00

Published Bycve@mitre.org

Affected Versions

No affected versions found.

References

http://www.debian.org/security/2003/dsa-316

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

4.6

Vector String

AV:L/AC:L/Au:N/C:P/I:P/A:P

Base SeverityUnknown

Version

2.0

Attack Vector (AV)