CVE-2003-0612: Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via...

Security readout for executives and security teams

Crafty 19.3, a chess engine package, contains multiple command-line buffer overflows. A person who already has local access could abuse long arguments to gain the system's "games" group privileges. This is not described as a remote internet-facing issue in the supplied sources. Exposure is most likely on older Unix/Linux systems with Crafty 19.3 installed and crafty.bin configured to confer group "games" privileges. Modern exposure is probably limited, but inventory evidence is required. Prioritize if legacy multi-user Unix/Linux systems are in scope. For most organizations, urgency is lower than remotely exploitable issues, but affected shared systems should be cleaned up because local privilege boundaries matter. Mitigation focus: Check vendor or distribution guidance for fixed Crafty packages.; Remove Crafty if it is not operationally required.; Upgrade affected Crafty 19.3 installations where supported fixes exist..

Prepared

Jun 30, 2026, 07:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.