PT-2002-1788 · Linux · Simpleinit

Published 2002-07-26 · Updated 2008-09-05 · CVE-2002-0767

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: simpleinit (affected versions not specified)

Description: The issue is related to simpleinit on Linux systems, where it fails to close a read/write FIFO file descriptor before creating a child process. This allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0767

Affected Products

Simpleinit

References · 5

• 🔥 http://securityfocus.com/bid/5001 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/276739 · Exploit
• 🔥 https://exploit-db.com/exploits/21538 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0767 · Security Note
• http://iss.net/security_center/static/9357.php · Vendor Advisory