Lucene search

MitreCVE-2002-2018

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2018

2005-07-1404:00:00

mitre

web.nvd.nist.gov

cve-2002-2018

sastcpd

sas

base 8.0

local users

privileges

netencralg

environment variable

segmentation fault

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.

Affected configurations

Nvd

Node

sasbaseMatch8.0

sasintegration_technologiesMatch8.0

VendorProductVersionCPE
sasbase8.0cpe:2.3:a:sas:base:8.0:*:*:*:*:*:*:*
sasintegration_technologies8.0cpe:2.3:a:sas:integration_technologies:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sas	base	8.0	cpe:2.3:a:sas:base:8.0:::::::*
sas	integration_technologies	8.0	cpe:2.3:a:sas:integration_technologies:8.0:::::::*

References

online.securityfocus.com/archive/1/253183

securitytracker.com/id?1003406

www.sas.com/service/techsup/unotes/SN/004/004201.html

www.securityfocus.com/bid/3995

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2002-2018