Vulnerabilities > CVE-2002-0542 - Unspecified vulnerability in Openbsd 2.9/3.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
openbsd
exploit available
NVD
Published: 2002-07-03
Updated: 2016-10-18

Summary

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.

Vulnerable Configurations

Part Description Count
OS
Openbsd
2

Exploit-Db

descriptionOpenBSD 2.9/3.0 Default Crontab root Compromise Vulnerability. CVE-2002-0542. Local exploit for openbsd platform
idEDB-ID:21373
last seen2016-02-02
modified2002-04-11
published2002-04-11
reporterPrzemyslaw Frasunek
sourcehttps://www.exploit-db.com/download/21373/
titleOpenBSD 2.9/3.0 Default Crontab Root Compromise Vulnerability

References