CVE-2002-2221

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 6.2

EPSS Низкий

Описание

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.

Ссылки

http://secunia.com/advisories/23024
Vendor Advisory
http://securitytracker.com/id?1005847
Vendor Advisory
http://www.securityfocus.com/bid/21644
Vendor Advisory
http://secunia.com/advisories/23024
Vendor Advisory
http://securitytracker.com/id?1005847
Vendor Advisory
http://www.securityfocus.com/bid/21644
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:chetcpasswd:chetcpasswd:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:chetcpasswd:chetcpasswd:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:chetcpasswd:chetcpasswd:2.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00056

Низкий

6.2 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-2221

debian

больше 22 лет назад

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2. ...

GHSA-mx83-g3r8-6vmg

github

больше 3 лет назад