nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.
| Software | From | Fixed in |
|---|---|---|
| stichting_mathematisch_centrum / nethack | 3.4.0 | 3.4.0.x |