CVE

Id
5209  
CVE No.
CVE-2002-0819  
Status
Candidate  
Description
Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function.  
Phase
Proposed (20020830)  
Votes
ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(3) Cole, Cox, Wall | REJECT(1) Foat  
Comments
Foat> Artsd was supposedly vulnerable to a format string vulneraibity | resulting in elevated privileges because it called command (artscontrol) and was | installed suid root. The problem was supposed to affect Red Hat 7.2. We looked | at two different install of 7.2, neither of which had artsd nor artscontrol | installed suid root. | Frech> XF:artswrapper-artsd-format-string(9813)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27630 5209 CVE-2002-0819 BUGTRAQ:20020706 LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT  View
27631 5209 CVE-2002-0819 URL:http://marc.info/?l=bugtraq&m=102607688730228&w=2  View
27632 5209 CVE-2002-0819 VULN-DEV:20020613 Re: LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT  View
27633 5209 CVE-2002-0819 URL:http://marc.info/?l=vuln-dev&m=102614898620164&w=2  View

Related JVN