CVE-2002-2017

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd...

CVE-2002-2017

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd...

CVE-2002-2017

The CVE-2002-2017 issue affects SAS/Base 8.0 where local users can cause arbitrary code execution by abusing sastcpd’s authprog environment variable to reference a malicious program, which is then executed by sastcpd. The root cause is the use of an environment variable (authprog) that dictates w...