CVE-2002-1245

Published: Nov 12, 2002Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.

Affected (1)

Products: Frank Mcingvale: Luxman

Frank Mcingvale

1 product

Luxman

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Frank Mcingvale Luxman	Version 0.41

References (12)

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103660334009855&w=2

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-189

Source: cve@mitre.org

PatchVendor Advisory

http://www.idefense.com/advisory/11.06.02.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.iss.net/security_center/static/10549.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/6113

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html