PT-2002-2212 · Luxman+1 · Luxman+1

Publicado

2002-11-12

·

Atualizado

2016-10-18

·

CVE-2002-1245

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: LuxMan version 0.41
Description: The issue allows local users to gain privileges by modifying the PATH environment variable to point to a Trojan horse gzip program, which is executed by LuxMan. This is possible because LuxMan uses the user-provided search path to find and execute the gzip program.
Recommendations: For LuxMan version 0.41, as a temporary workaround, consider restricting the use of the gzip program or setting a fixed PATH environment variable that points to the legitimate gzip program until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2002-1245
DSA-189

Produtos afetados

Luxman
Gzip