nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Nethack | Stichting_mathematisch_centrum | 3.4.0 (including) | 3.4.0 (including) |