CVE-2002-2023

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local users to read arbitrary files via unknown attack vectors.

Affected products

Yamaguchi Shingo Beep2: 1.0, 1.0a, 1.1, 1.2

References

http://www.kip.iis.toyama-u.ac.jp/~shingo/beep/package/src/beep2-1.2a.tar.gz
http://www.securityfocus.com/bid/3859
http://www.kip.iis.toyama-u.ac.jp/~shingo/beep/package/src/beep2-1.2a.tar.gz
http://www.securityfocus.com/bid/3859

Get alerted when CVE-2002-2023 or the next vulnerability affects your stack