CVE-2003-1474

CVE-2003-1474 describes a local privilege escalation vulnerability in the slashem-tty package within the FreeBSD Ports Collection. The flaw allows local users belonging to the 'games' group to modify the slashem-tty executable due to incorrect write permissions, leading to arbitrary code execution as other users. With a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), this vulnerability is considered high severity, requiring local access and low attack complexity to achieve complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 84/100, indicating significant risk. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Despite its age, the vulnerability has garnered some community discussion with 10 mentions, primarily on GitHub, though it lacks media coverage.