Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
https://exchange.xforce.ibmcloud.com/vulnerabilities/11283
http://www.securityfocus.com/bid/6806
http://www.debian.org/security/2003/dsa-350