CVEvulnerability

CVE-2002-0469

7.2 HIGH Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.

Affected configurations

• ecartis ecartis 1.0.0 snapshot 2002-01-21 • ecartis ecartis 1.0.0 snapshot 2002-01-25 • listar listar 0.126a • listar listar 0.127a • listar listar 0.129a

References