CVE-2002-1392 faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gert doering mgetty | <= 1.1.29 | No fix listed |
| debian/mgetty(Debian:12) | < 1.1.30-1 | 1.1.30-1 |
| debian/mgetty(Debian:13) | < 1.1.30-1 | 1.1.30-1 |
| debian/mgetty(Debian:14) | < 1.1.30-1 | 1.1.30-1 |
References
- GLSA-200304-09 vendor-advisory
- search.alphanet.ch vendor-advisory
- RHSA-2003:008 vendor-advisory
- RHSA-2003:036 vendor-advisory
- 7302 vdb-entry
- mgetty-faxspool-worldwritable-directory(11070) vdb-entry
- Debian Security Tracker CVE-2002-1392 vendor-advisory