CVE-2002-0851

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-09-05 · updated 2026-06-16

Description

Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.

Affected products

Isdn4Linux: 3.1_pre1

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html
http://www.iss.net/security_center/static/9811.php
http://www.securityfocus.com/bid/5437
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html
http://www.iss.net/security_center/static/9811.php
http://www.securityfocus.com/bid/5437

Get alerted when CVE-2002-0851 or the next vulnerability affects your stack