Every CVESearch/Get API key

CVE-2003-0358

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is...

4.6 MediumPublic exploitFix available

CVE-2003-0358 is a medium vulnerability (CVSS 4.6) in Falconseye Project Falconseye, published May 30, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 69th percentile. Fixed in nethack 3.4.1-1.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
1.22%EPSS, 69th percentile
Exploitation
None known5 public exploits
Fixed in
3.4.1-1nethack +9 more

Description

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Exploit likelihood

1.22%Down 0.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nethack
Debian:12
before 3.4.1-1
3.4.1-1
nethack
Debian:13
before 3.4.1-1
3.4.1-1
nethack
Debian:14
before 3.4.1-1
3.4.1-1
slashem
Debian:12
before 0.0.6E4F8-6
0.0.6E4F8-6
slashem
Debian:13
before 0.0.6E4F8-6
0.0.6E4F8-6
slashem
Debian:14
before 0.0.6E4F8-6
0.0.6E4F8-6
nethack
Debian:3.0
From an advisory covering 2 CVEs
before 3.4.0-3.0woody3
3.4.0-3.0woody3
slashem
Debian:3.0
before 0.0.6E4F8-4.0woody3
0.0.6E4F8-4.0woody3
jnethack
Debian:3.0
From an advisory covering 2 CVEs
before 1.1.5-11woody2
1.1.5-11woody2
falconseye
Debian:3.0
before 1.9.3-7woody3
1.9.3-7woody3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBNethack 3 - Local Buffer Overflow (1)2003-02-10
Exploit-DBNethack 3 - Local Buffer Overflow (2)2003-02-10
Exploit-DBNethack 3 - Local Buffer Overflow (3)2003-02-10
PoC in GitHubgmh5225/CVE-2003-03582022-12-17
PoC in GitHubfengjixuchui/CVE-2003-03582023-11-22

What each source reports

NVD Score used4.6

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Record
CVE-2003-0358
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-120
Updated
2026-11-02
CVE ListNo score

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Record
CVE-2003-0358
Updated
2026-11-02
EUVDEUVD-2003-0353No score

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Record
EUVD-2003-0353
Updated
2026-11-03
GitHub AdvisoriesGHSA-h59w-g68x-v974No score

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is...

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Record
GHSA-h59w-g68x-v974
Weakness
CWE-120
Updated
2026-11-02
OSVNo score

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Record
CVE-2003-0358
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0358No score

Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

Record
DEBIAN-CVE-2003-0358
Updated
2026-11-02

History

History
RecordedChangedSources
affected, exploits, facts
affected
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open