CVE-2002-2221

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.

Affected products

Chetcpasswd: 2.3.1, 2.3.3, 2.4.1

References

http://secunia.com/advisories/23024
http://securitytracker.com/id?1005847
http://www.securityfocus.com/bid/21644
http://secunia.com/advisories/23024
http://securitytracker.com/id?1005847
http://www.securityfocus.com/bid/21644

Get alerted when CVE-2002-2221 or the next vulnerability affects your stack