Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2002-0740: SLRNPull can let local users become admin
CVE-2002-0740 · published 24 years ago
Summary
If the slrnpull tool is installed with special permissions, a long directory argument can trigger a coding error that lets a local user gain higher privileges. This could let an ordinary user act with administrator rights on the system. Update the software or reinstall it without those special permissions to prevent the issue.
What to do
- Update debian slrn to version 0.9.6.2-9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | slrn |
< 0.9.6.2-9 Fix: upgrade to 0.9.6.2-9
|
| Debian:13 | debian | slrn |
< 0.9.6.2-9 Fix: upgrade to 0.9.6.2-9
|
| Debian:14 | debian | slrn |
< 0.9.6.2-9 Fix: upgrade to 0.9.6.2-9
|
| – | slrn_development_team | slrn |
0.9.6.2 0.9.6.3 0.9.6.4 cpe:2.3:a:slrn_development_team:slrn:0.9.6.2:*:*:*:*:*:*:* |
Original advisory text
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
References
- https://security-tracker.debian.org/tracker/CVE-2002-0740 Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html
- http://online.securityfocus.com/archive/1/269667 Exploit
- http://online.securityfocus.com/archive/1/270235
- http://www.iss.net/security_center/static/8910.php Vendor Advisory
- http://www.securityfocus.com/bid/4569 Exploit Patch Vendor Advisory
Severity
7.2
High
Timeline
Published12 Aug 2002
Updated31 Oct 2026
First seen1 Sep 2026
Track software like this
Free during beta