CVE Vulnerabilities

CVE-2002-0542

Published: Jul 03, 2002 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.

Affected Software

Name Vendor Start Version End Version
Openbsd Openbsd 2.9 (including) 2.9 (including)
Openbsd Openbsd 3.0 (including) 3.0 (including)

References