PT-2002-1592 · Openbsd · Openbsd

Published 2002-07-03 · Updated 2016-10-18 · CVE-2002-0542

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 2.9 through 3.0

Description The issue allows local users to potentially gain root privileges through calls to mail in cron, due to the processing of a tilde (~) escape character in a message even when not in interactive mode.

Recommendations For OpenBSD versions 2.9 through 3.0, consider disabling the use of the tilde (~) escape character in mail processing until a fix is available. Restrict access to the mail function in cron to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-0542

Affected Products

Openbsd

References · 8

• 🔥 https://exploit-db.com/exploits/21373 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/267089 · Exploit
• 🔥 http://securityfocus.com/bid/4495 · Exploit
• http://iss.net/security_center/static/8818.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0542 · Security Note
• http://marc.info/?l=bugtraq&m=101855467811695&w=2 · Note
• http://openbsd.org/errata30.html#mail · Note
• http://osvdb.org/5269 · Note