Security Advisory

CVE-2002-1245

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-09-01 04:00:00
Last updated 2024-08-08 03:19:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.