CVE-2002-1414 Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.
MediumCVSS 4.6
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inter7 qmailadmin | = 1.0 | No fix listed |
| inter7 qmailadmin | = 1.0.1 | No fix listed |
| inter7 qmailadmin | = 1.0.2 | No fix listed |
| inter7 qmailadmin | = 1.0.3 | No fix listed |
| inter7 qmailadmin | = 1.0.4 | No fix listed |
| inter7 qmailadmin | = 1.0.5 | No fix listed |
References
- 20020724 Re: qmailadmin SUID buffer overflow exploit mailing-list
- 20020806 qmailadmin SUID buffer overflow mailing-list
- www.inter7.com
- qmailadmin-templatedir-bo(9786) vdb-entry
- 5404 exploit patch vdb-entry vendor-advisory