PT-2002-1592 · Openbsd · Openbsd

Publicado 2002-07-03 · Atualizado 2016-10-18 · CVE-2002-0542

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 2.9 through 3.0

Description The issue allows local users to potentially gain root privileges through calls to mail in cron, due to the processing of a tilde (~) escape character in a message even when not in interactive mode.

Recommendations For OpenBSD versions 2.9 through 3.0, consider disabling the use of the tilde (~) escape character in mail processing until a fix is available. Restrict access to the mail function in cron to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-0542

Produtos afetados

Openbsd

Referências · 8

• 🔥 https://exploit-db.com/exploits/21373 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/267089 · Exploit
• 🔥 http://securityfocus.com/bid/4495 · Exploit
• http://iss.net/security_center/static/8818.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0542 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101855467811695&w=2 · Nota
• http://openbsd.org/errata30.html#mail · Nota
• http://osvdb.org/5269 · Nota