CVE-2003-0385

CVE-2003-0385 describes a buffer overflow vulnerability in Xaos versions 3.0-23 and earlier, specifically when the application is running with setuid permissions. This flaw allows local users on Debian Linux systems to achieve root privileges by supplying an excessively long string to the -language option. With a CVSS score of 7.2 (High), exploitation is straightforward, requiring only local access and low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not observed in active exploitation or on the CISA KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this vulnerability.