CVE-2002-0740

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-08-12 · updated 2026-06-16

Description

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Affected products

Slrn Development Team Slrn: 0.9.6.2, 0.9.6.3, 0.9.6.4

References

http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html
http://online.securityfocus.com/archive/1/269667
http://online.securityfocus.com/archive/1/270235
http://www.iss.net/security_center/static/8910.php
http://www.securityfocus.com/bid/4569
http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html
http://online.securityfocus.com/archive/1/269667
http://online.securityfocus.com/archive/1/270235
http://www.iss.net/security_center/static/8910.php
http://www.securityfocus.com/bid/4569

Get alerted when CVE-2002-0740 or the next vulnerability affects your stack