CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Published: Aug 12, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0740
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
slrn_development_team / slrn	0.9.6.3	0.9.6.3.x
slrn_development_team / slrn	0.9.6.4	0.9.6.4.x
slrn_development_team / slrn	0.9.6.2	0.9.6.2.x

http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html
http://online.securityfocus.com/archive/1/269667
http://online.securityfocus.com/archive/1/270235
http://www.iss.net/security_center/static/8910.php
http://www.securityfocus.com/bid/4569

Vulnerability Database

CVE-2002-0740