CVE-2002-1472

Published: Mar 3, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.

Affected (2)

Products: Xfree86 Project: X11r6

Xfree86 Project

1 product

X11r6

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xfree86 Project X11r6	Version 4.1.0
Xfree86 Project X11r6	Version 4.2.0

References (14)

http://archives.neohapsis.com/archives/linux/suse/2002-q3/1116.html

Source: cve@mitre.org

PatchVendor Advisory

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529

Source: cve@mitre.org

http://www.iss.net/security_center/static/10137.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/11922

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-066.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-067.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/5735

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/linux/suse/2002-q3/1116.html