Vulnerability Description
Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Abuse | Abuse | <= 2.00 |
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html
- http://www.idefense.com/advisory/11.01.02.txtExploitPatchVendor Advisory
- http://www.iss.net/security_center/static/11300.phpVendor Advisory
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html
- http://www.idefense.com/advisory/11.01.02.txtExploitPatchVendor Advisory
- http://www.iss.net/security_center/static/11300.phpVendor Advisory
FAQ
What is CVE-2002-1253?
CVE-2002-1253 is a vulnerability with a CVSS score of 7.2 (HIGH). Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute c...
How severe is CVE-2002-1253?
CVE-2002-1253 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-1253?
Check the references section above for vendor advisories and patch information. Affected products include: Abuse Abuse.