Unscored severity · published Apr 11, 2003
CVE-2002-1414
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable
–
CVSS
0.9%
EPSS
No
On KEV
Description
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QM
Qmailadmin · Inter7
1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1414
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1414
Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-08/0016.html
marc.info
http://marc.info/?l=vuln-dev&m=102859603029424&w=2
www.inter7.com
http://www.inter7.com/qmailadmin/ChangeLog
www.iss.net
http://www.iss.net/security_center/static/9786.php
Exploit
http://www.securityfocus.com/bid/5404
More from Qmailadmin
–
CVE-2006-1141
Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable