CVE

Id
4861  
CVE No.
CVE-2002-0469  
Status
Candidate  
Description
Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA"s, which could allow local users to gain privileges.  
Phase
Proposed (20020611)  
Votes
ACCEPT(2) Frech, Green | NOOP(4) Cole, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24870 4861 CVE-2002-0469 BUGTRAQ:20020310 Ecartis/Listar multiple vulnerabilities  View
24871 4861 CVE-2002-0469 URL:http://www.securityfocus.com/archive/1/261209  View
24872 4861 CVE-2002-0469 BID:4277  View
24873 4861 CVE-2002-0469 URL:http://www.securityfocus.com/bid/4277  View
24874 4861 CVE-2002-0469 XF:ecartis-root-privileges(8444)  View
24875 4861 CVE-2002-0469 URL:http://www.iss.net/security_center/static/8444.php  View
24876 4861 CVE-2002-0469 VULNWATCH:20020311 [VulnWatch] Ecartis/Listar multiple vulnerabilities  View

Related JVN