Lucene search

MitreCVE-2002-0542

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0542

2003-04-0205:00:00

mitre

web.nvd.nist.gov

openbsd

cron

mail

root privileges

cve-2002-0542

non-interactive mode

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

Percentile

0.4%

JSON

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.

Affected configurations

Nvd

Node

openbsdopenbsdMatch2.9

openbsdopenbsdMatch3.0

VendorProductVersionCPE
openbsdopenbsd2.9cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*
openbsdopenbsd3.0cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openbsd	openbsd	2.9	cpe:2.3:o:openbsd:openbsd:2.9:::::::*
openbsd	openbsd	3.0	cpe:2.3:o:openbsd:openbsd:3.0:::::::*

References

marc.info/?l=bugtraq&m=101855467811695&w=2

online.securityfocus.com/archive/1/267089

www.iss.net/security_center/static/8818.php

www.openbsd.org/errata30.html#mail

www.osvdb.org/5269

www.securityfocus.com/bid/4495

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-0542