CVE-2002-0740 Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
HighCVSS 7.2
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/slrn(Debian:12) | < 0.9.6.2-9 | 0.9.6.2-9 |
| debian/slrn(Debian:13) | < 0.9.6.2-9 | 0.9.6.2-9 |
| debian/slrn(Debian:14) | < 0.9.6.2-9 | 0.9.6.2-9 |
| slrn development team slrn | = 0.9.6.2 | No fix listed |
| slrn development team slrn | = 0.9.6.3 | No fix listed |
| slrn development team slrn | = 0.9.6.4 | No fix listed |
References
- Debian Security Tracker CVE-2002-0740 vendor-advisory
- 20020422 Slrnpull Buffer Overflow (-d parameter) mailing-list
- 20020425 slrnpull -d PoC exploit mailing-list
- 20020430 Re: Slrnpull Buffer Overflow (-d parameter) mailing-list
- slrnpull-d-spooldir-bo(8910) vdb-entry vendor-advisory
- 4569 exploit patch vdb-entry vendor-advisory