CVE-2002-0542 in OpenBSD

Riassunto

di MITRE

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Divulgazione: 03/07/2002
• Moderazione: accettato
• Voce: VDB-18362
• CPE: pronto
• CWE: CWE-269 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.2 (NVD)
• EPSS: 0.01532
• KEV: no
• Attività: molto basso
• Settore: Transportation, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0542
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0542
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0542/