CVE-2002-2221 — MEDIUM (6.2)

Vulnerability Description

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.

CVSS Score

6.2

MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Chetcpasswd	Chetcpasswd	2.3.1

References

http://secunia.com/advisories/23024Vendor Advisory
http://securitytracker.com/id?1005847Vendor Advisory
http://www.securityfocus.com/bid/21644Vendor Advisory
http://secunia.com/advisories/23024Vendor Advisory
http://securitytracker.com/id?1005847Vendor Advisory
http://www.securityfocus.com/bid/21644Vendor Advisory

FAQ

What is CVE-2002-2221?

CVE-2002-2221 is a vulnerability with a CVSS score of 6.2 (MEDIUM). Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue...

How severe is CVE-2002-2221?

CVE-2002-2221 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-2221?

Check the references section above for vendor advisories and patch information. Affected products include: Chetcpasswd Chetcpasswd.