CVE-2003-1446: Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbi...

Security readout for executives and security teams

CVE-2003-1446 is an old local vulnerability in Rogue 5.2-2. A user with shell access could abuse save-game handling to run code with the game group’s privileges. This is not an internet-facing remote issue, but it matters on shared Unix-like systems where legacy games or setgid game binaries remain installed. Exposure is likely limited to systems that still run Rogue 5.2-2 or packaged derivatives with similar save.c behavior. Risk is highest on multi-user hosts where untrusted local users can execute the game binary and where the binary grants games group privileges. Treat this as a legacy local privilege issue. It is unlikely to drive emergency response unless Rogue is present on shared systems, but it should be removed or remediated during legacy software cleanup and hardening work. Mitigation focus: Identify and remove Rogue 5.2-2 where it is not operationally required.; Check vendor or distribution guidance for a corrected Rogue package.; Avoid granting untrusted users shell access to affected shared systems..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.