Lucene search

[email protected]CVE-2002-0469

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0469

2002-08-1204:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0469

ecartis

privileges

vulnerability

listar

security issue

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, “lock-to-user” is not set, and ecartis is called by certain MTA’s, which could allow local users to gain privileges.

Affected configurations

NVD

Node

ecartisecartisMatch1.0.0_snapshot_2002-01-21

ecartisecartisMatch1.0.0_snapshot_2002-01-25

listarlistarMatch0.126a

listarlistarMatch0.127a

listarlistarMatch0.129a

CPENameOperatorVersion
ecartis:ecartisecartiseq1.0.0_snapshot_2002-01-21
ecartis:ecartisecartiseq1.0.0_snapshot_2002-01-25
listar:listarlistareq0.126a
listar:listarlistareq0.127a
listar:listarlistareq0.129a

CPE	Name	Operator	Version
ecartis:ecartis	ecartis	eq	1.0.0_snapshot_2002-01-21
ecartis:ecartis	ecartis	eq	1.0.0_snapshot_2002-01-25
listar:listar	listar	eq	0.126a
listar:listar	listar	eq	0.127a
listar:listar	listar	eq	0.129a

References

archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html

www.iss.net/security_center/static/8444.php

www.securityfocus.com/archive/1/261209

www.securityfocus.com/bid/4277

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2002-0469

cvelist1 nvd1