CVE:CVE-2003-0358
CNNVD:CNNVD-200306-004
nethack是一款多种系统平台下的游戏程序。
nethack对用户提交的参数缺少正确边界缓冲区检查，本地攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以game用户权限在系统上执行任意指令。
nethack对-s选项的值缺少正确边界检查，攻击者提交超长字符串作为此选项值，就可以触发缓冲区溢出，由于nethack在Redhat 8上以suid game属性安装，因此精心构建提交参数值可能以game用户权限在系统上执行任意指令。
solution:Upgrade falconseye_project falconseye to a higher version than 1.9.3,and avoid the version (,1.9.3]; Upgrade nethack nethack to a higher version than 3.4.0,and avoid the version (,3.4.0]; Upgrade debian debian_linux to a higher version than 2.2,3.0,and avoid the version 2.2,3.0