Every CVE Search/ Get API key

CVE-2003-0454

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via...

7.2 HighPublic exploitFix available

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Exploit likelihood

3.25%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Record
CVE-2003-0454
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Record
CVE-2003-0454
Updated
2026-11-02
EUVDEUVD-2003-0448 No score

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Record
EUVD-2003-0448
Updated
2026-11-03
GitHub AdvisoriesGHSA-h92j-qhmf-wvjj No score

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via...

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Record
GHSA-h92j-qhmf-wvjj
Updated
2026-11-02
OSV No score

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Record
CVE-2003-0454
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0454 No score

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Record
DEBIAN-CVE-2003-0454
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xgalaga
Debian:12
before 2.0.34-22
2.0.34-22
xgalaga
Debian:13
before 2.0.34-22
2.0.34-22
xgalaga
Debian:14
before 2.0.34-22
2.0.34-22
xgalaga
Debian:3.0
before 2.0.34-19woody1
2.0.34-19woody1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBXGalaga 2.0.34 (RedHat 9.0) - Local Game2003-07-31

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0454 is a high vulnerability (CVSS 7.2) in Joe Rumsey Xgalaga, published June 28, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.25%, the 88th percentile. Fixed in xgalaga 2.0.34-22.

References

MoveEnter Open