Published: 03/07/2002 Updated: 18/10/2016

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openbsd openbsd 3.0
openbsd openbsd 2.9

/* source: wwwsecurityfocuscom/bid/4495/info OpenBSD ships with a number of cron jobs configured by default The tasks are for the purpose of summarizing system information The mail(1) utility is used to send the summaries to the root user This utility supports escaped characters in message text indicating commands to be executed durin ...

NVD-CWE-Other http://online.securityfocus.com/archive/1/267089 http://www.iss.net/security_center/static/8818.php http://www.securityfocus.com/bid/4495 http://www.openbsd.org/errata30.html#mail http://www.osvdb.org/5269 http://marc.info/?l=bugtraq&m=101855467811695&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/21373/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0542

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect