Lucene search

K
cve[email protected]CVE-2002-0130
HistoryMar 25, 2002 - 5:00 a.m.

CVE-2002-0130

2002-03-2505:00:00
web.nvd.nist.gov
129
cve-2002-0130
buffer overflow
efax 0.9
setuid root
local user
arbitrary code

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.

Affected configurations

NVD
Node
efaxefaxMatch0.8a
OR
efaxefaxMatch0.9
OR
efaxefaxMatch0.9a

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2002-0130